AUXILIARY COMMITTEE FOR RETIREMENT HOMES SERVING CHRISTIAN SCIENTISTS Registered charity: 271782
DATA PRIVACY POLICY The processing of personal data (including its use) is governed by the General Data Protection Regulation (the “GDPR”). This is an EU Regulation soon to be replaced in the UK by a new Data Protection Act (DPA). Personal data relates to a living individual who can be identified from it (the ‘data subject’.) Consent and legitimate interests – The Auxiliary Committee for Retirement Homes Serving Christian Scientists, hereinafter called the Auxiliary Committee, considers it has legitimate interests in holding the personal data of present and former applicants and enquirers, so consent is not required from these individuals. We share personal contact details internally for administrative use. No personal data is shared with any external body without the individual’s consent.
Use of personal data Personal data is used: • to administer individual records; • to manage the Auxiliary Committee activities and volunteers; • to maintain financial records (including the processing of gift aid). If the Auxiliary Committee wishes to use personal data for a purpose not covered by this Data Privacy Policy, a new notice will be issued explaining the use and setting out the purposes and processing conditions and seeking the data subject’s consent. Data protection – The Auxiliary Committee complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure; and by ensuring that appropriate technical measures are in place to protect personal data. All personal data will be treated as strictly confidential and will only be shared with other members of the Auxiliary Committee for purposes connected with its activities. It will not be shared with third parties except with the data subject’s consent. It will not be sold. Data retention – Individuals’ data held will be retained while it is still current or until consent is withdrawn. Data subjects’ rights Data subjects have the right: • to request a copy of any personal data which the Auxiliary Committee holds about them; • to request the Auxiliary Committee to correct any personal data that is inaccurate or out of date; • to request that personal data be erased if it is no longer necessary for the Auxiliary Committee to retain it; • to request the data controller to provide them with their personal data and, if they wish, send it to another data controller; • to withdraw consent to the processing at any time; • if there is a dispute about the accuracy or processing of personal data, to request a restriction be placed on further processing; • to object to the processing of personal data; • to lodge a complaint with the Information Commissioner’s Office (see the website at www.ico.org.uk). Data Controller – The Data Controller is the Administrator Policy reviews – This policy will be reviewed every 2 years and any change adopted as required.
|