PERSONAL DATA PRIVACY NOTICE
Humanity at Heart (HaH) is a
small charity with a limited need to collect and process data from our donors, other
supporters, volunteers and other contacts (collectively, “our Contacts”) . As
such we have not considered it necessary to register under the Data Protection
Act 1998.
However, the implementation of
the EU General Data Protection Regulation (GDPR) in May 2019 and the upcoming
new Data Protection Act impose new obligations on HaH in relation to personal
data, which this notice addresses.
Personal
Data
For the purpose of this notice, the
term “personal data” means data relating to a living individual which allows
that person to be identified. Such identification
can be by the information alone or in conjunction with any other information in
the data controller’s possession or likely to come into such possession.
HaH is unlikely to acquire
personal data from any source other than the individual identified by the data
or someone acting on such individual’s behalf and with their knowledge.
Data
Controller
HaH is the data controller
(contact details below) as it decides how personal data is processed and for
what purposes.
How HH
Uses Personal Data
HH acquires personal data in
various ways.
We use your personal data for the
following purposes: -
·
To maintain records of our contacts who have
expressed an interest in HaH’s work and to send communications about the
activities of HaH , to such individuals from time to time;
·
To fundraise for HH, which will include
processing of donations by means of Gift Aid or similar tax efficient
arrangements;
·
To manage our employees (if any) and volunteers;
·
To maintain HaH’s accounts and records;
HaH does not access bank account,
credit card or similar financial data from donors.
Security
and Other Matters
HaH is committed to ensuring
that personal data is maintained securely and is protected from loss,
unintended destruction or damage and from unauthorised or unlawful processing;
it has put in place suitable physical, electronic and organizational
procedures.
HaH will not collect or retain
excessive amounts of personal data and will, to the extent it is able, keep the
personal data it needs up to date.
Retention
Personal data will be retained
in relation to each of our contacts and volunteers as long as relevant law
requires or, if longer, so long as we consider there to be an ongoing
relationship to an individual. After that time such data will be securely
destroyed.
Legal Basis
for Processing Personal Data
Personal data is processed on the
following bases:
·
For
our contacts and volunteers, explicit consent of the individual in relation to
one or more of the data uses set out above.
·
For
employees, processing necessary for carrying out obligations under employment,
social security or social protection law, or other relevant laws;
.
Sharing Personal
Data
Subject
to the following or to the requirements of any relevant law, personal data will
be treated as strictly confidential and will only be shared among the trustees of
HaH and HaH will not share
personal data with third parties. Personal data may also on occasion be shared
with volunteers working with HaH.
Personal data may also need to be shared with
tax authorities to allow for tax reclaims or other processing of donations
qualifying for tax benefits.
Rights in
Relation to Personal Data
Unless subject to an exemption
under the GDPR, individuals have the following rights with respect to their
personal data: -
·
The right to request a copy of any personal data which HaH holds;
·
The right to request that HaH corrects any personal data if it is
found to be inaccurate or out of date;
·
The right to request that personal data is erased where it is no longer
necessary for HaH to retain such data;
·
The right to withdraw consent to the processing at any time
·
The right to request that HaH provide a copy of personal data, and
where possible to transmit that data directly, to another data controller,
(where applicable).
·
The right, where there is a dispute in relation to the accuracy or
processing of personal data, to request a restriction is placed on further
processing;
·
The right to object to the processing of personal data, (where
applicable)
·
The right to lodge a complaint with the Information Commissioners
Office.
Further processing
If HaH wishes to use any individual’s personal data for a
new purpose, not covered by this notice, then we will provide that person with
a new notice explaining this new use prior to commencing the processing and
setting out the relevant purposes and processing conditions. Where and whenever
necessary, HaH will always seek such individual’s prior consent to the new
processing.
Contact Details
To exercise all relevant rights,
queries or complaints please in the first instance Ann Heroys via email, humanity@humanityatheart.org.uk or by phone 01273 846135
You can contact the Information
Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water
Lane, Wilmslow, Cheshire. SK9 5AF.
May 2018
