Privacy notice for service users, trainees, volunteers and event attendees
Your personal data – what is it?
Personal data means any data which identifies a living person. Processing personal data (collecting, storing, using, altering, sharing or destroying personal information) is governed by the General Data Protection Regulation 2016/679 (known as GDPR).
How do we process your personal data?
DVSC complies with its obligations under GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We use your personal data for the following purposes: –
To deliver the services you’ve requested from us
To fulfil the reporting requirements of our project funders
To evaluate the impact of services on the individuals and organisations who took part
For audit and verification purposes
To inform you about similar services, activities or events from ourselves and other Third Sector Organisations
What is the legal basis for processing your personal data?
Consent – We ask that clear consent is given for us to process your personal data for the purposes listed above. Your data will not be processed should we not receive your consent to do so.
Sharing your personal data
DVSC will not pass on your information unless we have received your clear consent to do so beforehand. Your information will only be passed on in order to complete the purposes for which we use your personal data as listed above.
We will never pass on your information to another organisation for them to market directly to you or your organisation.
How long do we keep your personal data?
Your data is kept for no longer than necessary to complete the purposes for processing your data as listed above.
Your rights and your personal data
You have the following rights with respect to your personal data:
The right to request a copy of your personal data which the DVSC holds about you;
The right to request that DVSC corrects any personal data if it is found to be inaccurate or out of date;
The right to request your personal data is erased where it is no longer necessary for DVSC to retain such data;
The right to request that DVSC provides you with your personal data and where possible, to transmit that data directly to another data controller;
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
The right to object to the processing of personal data;
The right to lodge a complaint with the Information Commissioners Office.
Transfer of Data Abroad
Where DVSC uses platforms outside the UK to process data (such Survey Monkey), we have satisfied ourselves that these platforms adhere to recognised frameworks, such as the EU-US Privacy Shield Framework, as set forth by the European Commission and the US Department of Commerce regarding the collection, use and retention of personal data from European Union member countries, and have adequate measures in place to protect your data and comply with GDPR.
Automated Decision Making
We do not carry out automated decision making with your personal data.
If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use before we start the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
To exercise all relevant rights, queries or complaints please in the first instance contact DVSC on 01824 702441 or via email firstname.lastname@example.org or at Naylor Leyland Centre, Well Street, Ruthin, LL15 1AF