We comply with data protection laws at all times and have set out this notice to explain what personal data we collect, why we collect it, how we protect it, and to explain your rights.
Personal data we collect
We do not collect any data about people visiting our website. We do not collect any details about people receiving our services who are resident in care. We collect the following data about people who attend our community activities:
- your name, e-mail address and contact details;
- emergency contact person details;
- relevant medical information.
How we protect your data
We have a GDPR statement and procedures for our staff and volunteers to ensure your data is kept safe. We store your data in password protected computer systems and smart phones managed by us.
Why we use your data
We use your data for three reasons:
- To provide you with appropriate information, advice and support relevant to our activities.
- For statistical, monitoring and evaluation purposes;
- To report to stakeholders.
When and how we might share your data
We share your data with colleagues within Generation Arts on a need to know basis. We never sell your personal data. We undertake all our contact with you by phone, mail or email directly from our offices. We do not use a third party. Your information is never transferred to a third party unless that party is a project partner, which will be explicit on the project material.
How long we keep your data
- Class and project contact lists – we will retain this data until you elect to be removed from the class list.
- New customer / service enquiry information – we do not retain this information.
Transferring data outside of the European Economic Area (EEA)
We are required to tell you if we transfer data outside of the EEA. The data we collect and process is not transferred outside of the EEA.
Legal basis for using your data
We rely on your consent to use your personal data in relation to sending you direct e-mails via our class mailing list or via phone, or providing customer care, information or support should you choose to contact us directly. Your legal consent is given when you complete a Registration and Data Consent form at one of our activities.
Your legal rights
You have the following rights:
- the right to ask what personal data we hold about you;
- the right to ask us to update and correct or delete any out-of-date or incorrect personal data that we hold about you;
- the right to opt out of any marketing communications that we may send you.
To exercise any of the above rights please contact us directly.
You also have the right to lodge a complaint with the Information Commissioner’s Office (the supervising authority for data protection in the UK). To do that please visit their website at https://ico.org.uk/concerns/
Reviewing and changing how we use data
This Privacy Notice was updated on 29th August 2018.
We regularly review our use of personal data to ensure that what we do continues to be fair, transparent, safe and legal. We may in the future change software or technologies, or how we work, and this may result in us changing what data we collect and/or how we use it. We will only use your data for the purposes set out above. If we want to use your data for any other purpose we will contact you and seek your express permission before we conduct any such processing.
We will always seek to minimise the amount of data we collect and use, and to only keep it for as long as we need to.
Whenever any change is made to how we collect or use personal data we will update this notice and any other relevant policies.
How to find out more or to make a complaint
We’ve endeavoured to make this notice clear, informative and understandable, but if it is not then please contact us and we shall provide further information as required. We will also look to improve the wording of this notice, based on feedback.
To provide feedback, ask for more details or to make a complaint about our collection or use of your personal data then please contact us directly.
