1) Why we collect and process your personal data
We collect and process personal data for the purposes of communication and for the organisation of events. Depending on the data that is processed the legal basis is either legitimate interest or consent – this is outlined below.
2) Categories of data that we may collect and process;
a) Members of the Public
The personal data that we may collect and process includes:
•Your name, contact details and other information such as bank accounts (E.g for invoicing) or personal circumstances.
This is processed under consent as you have submitted an enquiry to us either as a request for services or other information.
3) How we hold and share your personal data
We process your personal data in strict confidence. We keep your personal data securely in electronic systems.
In the course of processing your personal data we may share it as below:
•Third party organisations providing services on our behalf – for example mailing houses, bulk email service providers and similar. Data will not be shared with these companies without a similar policy being in place to protect your data.
4) Your rights
You have legal rights in respect of the personal data we hold about you. The Information Commissioner’s Office (ICO) has published guidance on the full range of rights (https://ico.org.uk/for- organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/). The rights that are most relevant to the way in which we use your personal data include:
• The right to be informed about how we use personal data – this privacy notice gives that information.
• The right to object – if you object to us processing your data for marketing purposes, we will then stop doing so, unless we are processing the data in respect of a legal claim or can otherwise show that our legitimate interest in processing the data overrides your rights and interests.
• The right of access – if you ask us for the personal data we hold about you we will provide it free of charge (unless we have already provided it to you, in which case we may have to charge you the administrative cost of providing it again).
• The right to rectification – if you ask us to correct personal data about you that is inaccurate or incomplete, we will do so.
• The right to erasure – also known as the ‘right to be forgotten’. If you ask us to delete your personal data, we will do so if there is no compelling reason to continue processing the data. We will not usually delete data where we have a duty to keep accurate records – for example, to comply with a legal obligation, or in connection with a legal claim. If you ask us to delete such data we will discuss this with you.
5) Contacting us and the ICO about your personal data Please speak to us first if you have any questions or concerns about the way in which we process personal data. You can contact us via email (email@example.com). You have the right to complain to the ICO if you have a concern about our handling of your personal data which you do not think we can resolve. You can contact the ICO via https://ico.org.uk/concerns/