About this statement
1. Under the General Data Protection Regulation (GDPR), there are six data protection principles that we must comply with. These provide that the personal information the Charity holds about members and volunteers must be:
- processed lawfully, fairly and in a transparent manner
- collected only for legitimate purposes that have been clearly explained and not further processed in a way that is incompatible with these purposes
- adequate, relevant and limited to what is necessary in relation to those purposes
- accurate and, where necessary, kept up to date
- kept in a form which permits identification for no longer than is necessary for those purposes, and
- processed in a way that ensures appropriate security of the data.
This statement explains how the Charity complies with these requirements when dealing with the personal data of members and volunteers. It sets out when and why we collect personal information, how we use it and how we keep it secure.
2. The Charity reserves the right to amend this statement from time to time without prior notice. Any amendments (which will not be made retrospectively) will be published on our website www.norebarnwoods.org.uk.
What information we collect and why
1. Type of information: Member/volunteer’s name, address, telephone numbers, email address(es) and gift aid declarations.
2. Purpose: Managing the membership of the Charity and contacting members/volunteers about voluntary work.
3. Legal basis for processing: For the purposes of our legitimate interests in operating the Charity and its charitable aim of managing the woods for the public benefit.
How we protect this data?
1. The Charity implements generally accepted standards of technology and operational security in order to protect such personal data from loss, misuse, or unauthorised alteration or destruction.
2. The Charity will notify members and volunteers promptly in the event of any breach of their personal data which might expose them to serious risk.
How long do we keep it?
1. The Charity will hold members and volunteers’ personal data for as long as they are a member/volunteer of the Charity and for as long afterwards as is necessary to comply with its legal and tax obligations.
2. The Charity will review the personal data held every year to establish whether it is still entitled to process it. If the Charity decides that it is not entitled to do so, it will stop processing the member’s or volunteer’s personal data except where it needs to retain the personal data in an archived form to comply with any legal or tax obligations.
The Charity will not pass on members or volunteers’ details to third parties and it will never sell their personal data.