FRIENDS OF GRANGE PARK, OLD COULSDON'S
PRIVACY POLICY UNDER THE GENERAL DATA PROTECTION REGULATION

This privacy policy sets out how we use and protect any information that you give us when you use our website. We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using our website, you can be assured that it will only be used in accordance with this privacy statement.
We may occasionally change this policy by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 25th May 2018.

1. Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation [the GDPR]. [Regulation [EU] 2016/679]

2. Who are we?
The Friends of Grange Park Old Coulsdon [Charity No: 1159938] is the data controller [contact details below].This means the charity decides how your personal data is processed and for what purposes.

3. How do we process your personal data?
The Friends of Grange Park Old Coulsdon complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We use your personal data for the following purposes:

• To inform you of news, fundraising appeals, events and activities as organised by the charity;
• To fundraise and promote the interests of the charity;
• To maintain our own accounts and records [including the processing of Gift Aid].

4. What is the legal basis for processing your personal data?
Explicit consent of the individual is sought so that we can keep you informed about news, events, and activities and to allow us to process gift aid donations.

5. Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with trustees of the charity for purposes connected with the charity. We will only share your data with third parties with your consent.
In the event that an individual makes a monetary donation, the charity uses the MyDonate service to process that donation, accessed through the Donations page on our website. This service does take some personal data in accordance with the Terms and Conditions of this service. 

The link to the MyDonate privacy policy is:-

 https://www.btplc.com/mydonate/aboutmydonate/Privacypolicy/index.aspx

6. How long do we keep your personal data?
We keep data relating to the mailing list and Gift Aid. 
Mailing list information is retained until you unsubscribe from the list.   
Gift Aid information is retained for up to six years after the calendar year to which it relates.

7. Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:

• The right to request a copy of the personal data which the Friends of Grange Park Old Coulsdon holds about you;
• The right to request that the Friends of Grange Park Old Coulsdon corrects any personal data if it is found to be inaccurate or out of date;
• The right to request that your personal data is erased where it is no longer necessary for the Friends of Grange Park Old Coulsdon to retain such data;
• The right to withdraw your consent to the processing at any time;
• The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request that a restriction is placed on further processing;
• The right to lodge a complaint with the Information Commissioner’s Office.

8. Further processing
If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

9. Contact Details
To request to exercise all relevant rights, raise queries or make complaints please in the first instance contact the Data Controller by email on friendsofgrangepark@gmail.com.

To contact the Information Commissioner’s Office :-

By telephone : (0303) 123 1113
By email:          https://ico.org.uk/global/contact-us/email
By post:            Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Dated: 12/05/2018