CCDT GDPR Statement
The Cambusbarron Community Development Trust is aware of its obligations under the General Data Protection Regulation (GDPR) and is committed to processing your data securely and transparently. This privacy notice sets out, in line with GDPR, the types of data that we hold. It also sets out how we use that information, how long we keep it, how we use it, how we protect it and your rights with respect to your data.
Who we are
The Cambusbarron Community Development Trust (CCDT) is a Scottish Charitable Incorporated Organisation (Registered SCIO number SCO411449). CCDT works to advance environmental protection and community development, in and around the village of Cambusbarron.
The Cambusbarron Community Development Trust (CCDT) will be a “controller” of the personal information that you provide to us online, over the phone and through paper forms.
Where we will store your information
The CCDT will store personal information in Box, a secure online system.
We do not hold personal information concerning bank accounts. Any financial information which is disclosed when making donations is processed independently by the crowdfunding organisation. If you use your credit or debit card to donate to us, buy something or make a booking online, the financial information is processed by the financial organisation, not by CCDT.
Why we need your information – legitimate purposes
CCDT will use your personal information to carry out our work. We will use your information to:
- communicate with you regarding the work of the CCDT
- ask for donations or support towards CCDT projects
- manage mailing lists and information about supporters to assist us in the ongoing work of the CCDT. This may include looking at the ages of supporters, or using postcode information to access post-code level data, for example information held by the Scottish Index of Multiple Deprivation.
- respond to third party (for example funding organisation) requests for demographic information, such as ages and post-code areas of supporters.
- respond to and communicate with you regarding your questions, comments, support needs or complaints, concerns or allegations.
- fulfil our requirements to our members, as set out in our constitution.
Why we need your personal information – marketing:
Where you are happy for us to do so, we would like to contact you by email with information about events related to the CCDT which are organised by 3rd parties.
At any time you can request that we stop sending emails to you by emailing us at email@example.com.
Other uses of your personal information
We may ask you if we can process your personal information for additional purposes. For example, to display a list of volunteers so that we can organise awards ceremonies. Where we do so, we will provide you with an additional privacy notice with information on how we will use your information for these additional purposes.
Who we share your personal information with
- We will share aggregate data (e.g. ages, post-code areas) with third parties such as funding bodies.
- We will share personal information with third parties where this is relevant to your involvement with CCDT. For example if you volunteer for a work party we may give your name and contact number to the organiser.
- If your personal information is included in any images or videos taken by us at events this can be used for promotional and/or journalistic purposes.
- We may be required to share personal information with statutory or regulatory authorities and organisations to comply with statutory obligations. Such organisations include Disclosure Scotland and Police Scotland for the purposes of safeguarding children.
- We may also share personal information with our professional and legal advisors for the purposes of taking advice.
In the event that we do share personal information with external third parties, we will only share such personal information strictly required for the specific purposes and take reasonable steps to ensure that recipients shall only process the disclosed personal information in accordance with those purposes.
How long we will keep your information for
Your information will be deleted from our records 6 years after your membership or support has ended. We may have to be able to contact you should there be a question concerning our accounts or insurance during this period.
We cannot be held responsible for the privacy of data collected by websites not owned or managed by CCDT, including those linked through our website.
Emails aren’t always secure, and they may be intercepted or changed after they’ve been sent. CCDT doesn’t accept liability if this happens. The contents of emails reflect their author’s views and not necessarily those of CCDT.
Please do not send the CCDT any financial data through email.
You can exercise any of the following rights by writing to us at firstname.lastname@example.org.
Your rights in relation to your personal information are:
- you have a right to request access to the personal information that we hold about you by making a “subject access request”;
- if you believe that any of your personal information is inaccurate or incomplete, you have a right to request that we correct or complete your personal information;
- you have a right to request that we restrict the processing of your personal information for specific purposes; and
- if you wish us to delete your personal information, you may request that we do so. Any requests received by the CCDT will be considered under applicable data protection legislation.
If you remain dissatisfied, you have a right to raise a complaint with the Information Commissioner’s Office (ICO) The ICO can be contacted at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or ico.org.uk.