Swanage Neighbours (SCCR) GDPR policy

 

  1. Introduction

  2. Why is this policy important?

  3. Who and what does this policy apply to?

  4. Roles and responsibilities

  5. Data protection principles

 

Introduction

In order to operate, Swanage Neighbours (SCCR) needs to gather, store and use certain forms of information about individuals.

 

These include volunteers, business contacts, other organisation contacts and people that we have a relationship with or regularly need to contact.

 

This policy explains how this data is collected, stored and used in order to meet Swanage Neighbours’ (SCCR) data protection standards and comply with the law as set down by the GDPR.

 

Why is this policy important?

This policy ensures that Swanage Neighbours (SCCR):

 

  • Protects the rights of our  volunteers, business contacts, other organisation contacts and people that we have a relationship with or regularly need to contact

  • Complies with data protection law and follows good practice

  • Protects the organisation from the risks of a data breach

 

Who and what does this policy apply to?

This applies to all Volunteers handling data on behalf of Swanage Neighbours (SCCR):

 

It applies to all data that Swanage Neighbours (SCCR) holds relating to individuals, including:

 

  • Names

  • Email addresses

  • Postal addresses

  • Phone numbers

  • Any other personal information held 

 

Roles and responsibilities

 

Everyone who has access to data as part of Swanage Neighbours (SCCR) has a responsibility to ensure that they adhere to this policy.

 

Data controller

 

The Data Controller for Swanage Neighbours (SCCR) is Laura Rowan. They are responsible for why data is collected and how it will be used. Any questions relating to the collection or use of data should be directed to the Data Controller. They can be contacted via swanageneighbours@gmail.com

 

Data protection principles

 

We fairly and lawfully process personal data. We will only collect data where lawful and where it is necessary for the legitimate purposes of the group.

 

  • Name and contact details will be collected initially in order to communicate with them. Other data may also subsequently be collected in relation to their ongoing relationship.

  • The name and contact details of volunteers will be collected when they take up a position, and will be used to contact them regarding group administration related to their role. Further information, including personal financial information may also be collected in specific circumstances where lawful and necessary.

  • An individual’s name and contact details will be collected when they complete a digital form. This will be used to contact them about their enquiry.

  • An individual’s name, contact details and other details may be collected at any time, with their consent, in order for Swanage Neighbours (SCCR) to communicate with them about volunteering activities.

 

We only collect and use personal data for specified and lawful purposes

 

When collecting data, Swanage Neighbours (SCCR) will always explain to the subject why the data is required and what it will be used for, e.g.

 

“Please enter your email address in the form below. We need this so that we can send you email updates.”

 

We will never use data for any purpose other than that stated or that can be considered reasonably to be related to it. For example, we will never pass on personal data to unrelated third parties, only those within the scheme.

 

We ensure any data collected is relevant and not excessive

Swanage Neighbours (SCCR)  will not collect or store more data than the minimum information required for its intended purpose.

 

E.g. we need to collect email addresses from people in order to be able to contact them, but data on their marital status or sexuality will not be collected, since it is unnecessary and excessive for the purposes of organisation administration.

 

Swanage Neighbours (SCCR) will not continue to store data when it is no longer required e.g at the end of a project. All data will be destroyed in accordance with best practice. 

 

We ensure data is accurate and up-to-date

Any individual will be able to update their data at any point by contacting the Data Controller.

We ensure data is not kept longer than necessary

 

Swanage Neighbours (SCCR) will keep data on individuals only until the end of this project, at which point we will destroy the information, unless there is a legal requirement to keep records.

 

We process data in accordance with individuals’ rights

 

The following requests can be made in writing to the Data Controller:

 

  • Individuals can request to see any data stored about them. Any such request will be actioned within 14 days of the request being made.

  • Individuals can request that any inaccurate data held on them is updated. Any such request will be actioned within 30 days of the request being received.

  • Individuals can request to stop receiving any marketing communications. Any such request will be actioned within 14 days of the request being made.

  • Individuals can object to any storage or use of their data that might cause them substantial distress of damage or any automated decisions made based on their data. Any such objection will be considered by the organisation management, and a decision communicated within 60 days of the request being made.

 

We keep personal data secure

Swanage Neighbours (SCCR) will ensure that data held by us is kept secure:

 

  • Electronically-held data will be held within a password-protected and secure environment

  • Passwords for electronic data files will be reset each time an individual with data access leaves their role/position

  • Physically-held data will be stored securely

  • Access to data will only be given to relevant volunteers where it is clearly necessary for the running of the group. The Data Controller will decide in what situations this is applicable and will keep a master list of who has access to data.

  • Swanage Neighbours (SCCR) will not transfer data to any third parties.


 

NEXT REVIEW DATE: 21/03/2021

Swanage Neighbours (SCCR) GDPR Policy V1 22/3/2020

spdt-logo-191-trans.png

Company Limited by Guarantee, Registration No: 8743407

Registered Charity No: 1162662