Purpose of This Notice
Prestwood Village Association is committed to protecting your personal data. This privacy statement explains how we collect, use and protect your personal data when we deliver the services you have requested from us in accordance with the General Data Protection Act 2018 and any other national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK.
Definition of Data Controller and Data Processor
A data controller is the person or organisation that decides the purpose for which and the way in which any personal data is processed. A Data processor refers to the person or organisation which processes personal data on behalf of the controller.
The data controller is Prestwood Village Association. c/o 25a Chequers Lane,
Prestwood, Bucks. HP16 9DR.
The data protection officer is the Chair of Prestwood Village Association who can be contacted directly at the address above or e-mail firstname.lastname@example.org . The current chairman is our Data Protection Point of Contact and is responsible for any enquiries relating to this privacy notice or matters concerning your personal data.
Definition Data Processing
The meaning of data processing is defined as any operation performed on personal data whether by automated systems or not and includes collection, use, recording etc.
Information We Collect
You agree that we are entitled to obtain, use and process the information you provide to us to enable us to provide our services to you. The information we collect may vary depending on which services you engage us to perform. Types of personal information we may collect in the course of performing the agreed services on your behalf may include:
- Personal information: for example:
- for committee members: your name, email address, post code, mailing address, phone numbers, date of birth
- For subscribers: your name, email address and postal code.
- Information relating to complaints or enquiries you make to us
- Website content that you provide to us for inclusion on the Prestwood Village Association website
- Information from other sources, included publicly available information, information provided by your employer or our clients.
We do not collect any special categories of personal data about you ( this includes details about your race or ethnicity, religious of philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions or offences.
How we collect your personal data
We collect your personal data when you either join as a committee member or you join as a subscriber to the Prestwood Village Association website:
- You contact us directly by e-mail, telephone, post or supply contact data and/or queries about our services via our website
- You share your details with us at an event or AGM
- Other direct interactions such as giving us some feedback or making comments directly on the website.
How your personal data is used
We will only use your data when permitted to do so by the law.
For committee members:
- We will process your data in accordance with the financial regulations we need to meet from our bank
For subscribers & committee members:
- We will process your personal data when we send out a newsletter to subscribers
- Verify your identity where this is required
- Contact you by e-mail
- Understand your needs and how they may be met
- Process financial transactions (where we receive donations or make payments).
- Maintain our records in accordance with applicable legal and regulatory obligations
Change of purpose
We will only use your personal data for the purposes for which we collected it. Where we need to use your personal data for another reason, we will do so only in circumstances where we reasonably consider it is compatible with the original purpose. In the event we use your personal data for a different purpose, we will notify you of the legal basis that allows us to do so before commencement.
Sharing your Data
We will share your data with third parties when required to do so by the law, to administer the relationship between us or where there is another legitimate interest to do so for the purposes of completing tasks and providing services to you on our behalf. Example external third parties are typically service providers and Information Technology Support while resolving problems relating to IT.
We will not release your information to third parties unless you have requested that we do so or are required to do so by law.
Any third party service provider we use are required to take appropriate security measures to respect the security of your data and treat it in accordance with the law. Third-Party service providers are not permitted to use your personal data for their own purposes and they are only permitted to process your personal data in accordance with our instructions and for specified purposes.
Finally, we may share your personal data if we choose to transfer or merge Prestwood Village Association with another organisation covering similar functions to ourselves.
We will not sell or rent your information to third parties.
We will not share your information with third parties for marketing purposes.
We do not transfer your personal data outside the European Economic Area (EEA)
We have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in any unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those committee members, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have implemented procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
Whilst we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk
We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.
Data retention periods will depend upon a number of factors such as:
- The requirements of our Association and services provided;
- Relevant statutory or legal obligations;
- The purposes for which the data was originally collected;
- The lawful grounds upon which we based our processing;
- They types of personal data collected;
- The amount and categories of your personal data;
- Whether the purpose of the processing could be achieved by other means.
Our normal data retention period for data received in connection with our operations and services will be 7 years in line with regulatory requirements unless there is a legitimate interest for retaining that data for a longer period.
Subscribers wishing to unsubscribe themselves from our newsletter will be unsubscribed within seven days of an email request to email@example.com . Or they may choose to unsubscribe themselves online through the link in the bottom of every newsletter. They will not be contacted any further and their details will be removed from the database within six months during our next maintenance cycle.
Under certain circumstances you have rights under data protection laws in relation to your personal data as follows:
- Request access to your personal data (known as a data access request). This enables you to receive details of the personal data we hold about you and to check that we are lawfully processing it.
- Request Correction of the personal data that we hold about you.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us to continue processing it. You also have the right to object to processing (see below) .
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which make you want to object to processing on this basis. You also have the right to object where we are processing your personal information for direct marketing purposes. Under such circumstances your personal data will be removed from the website.
- Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want to establish its accuracy or the reason for processing it. Under such circumstances your personal data will be removed from the website.
- Request the transfer of your personal data to you or another data controller if the processing is based on consent, carried out by automated means and this is technically feasible. We do not believe that any circumstances exist where this right would be exercised due to the very small amount of data held.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
Right to withdraw consent
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose (for example, in relation to subscribing to the Prestwood Village Association Newsletter that you have indicated you would like to receive form us), you have the right to withdraw your consent for that specific processing at any time.
You may unsubscribe yourself at any time by clicking on the unsubscribe link at the bottom of the newsletter.
You may also withdraw your consent by email, please email our data protection point of contact at firstname.lastname@example.org
Changes to this Notice
Any changes we may make to our privacy notice in the future will be updated on our website.
This privacy notice was last updated in 22nd May 2018.
If you have any queries regarding this notice or if you would like to speak to us about the manner in which we process your personal data, please e-mail our data protection point of contact John Cadman at email@example.com.
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Chesire, SK9 5AF
Telephone 0303 123 1113 (local rate) or 01625 545 745 (national rate).
Website – https://ico.org.uk/concerns