Our Storylines CIC is committed to protecting and respecting your privacy. This document sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
- Your personal data – what is it?
Personal data means any recorded information held by us and from which an individual can be identified, including names, addresses, telephone numbers and other personal details. This information is gathered in a variety of ways including web sign-up forms, consent, copyright and feedback forms, contracts of employment, partnership agreements and funding agreements. This personal information must be handled properly under the Data Protection Act 1998 (‘the DPA’) and the General Data Protection Regulation 2016/679 (‘the GDPR’).
- Who are we?
The Our Storylines CIC Directors are the data controllers. This means we decide how your personal data is processed and for what purposes. We regularly review our methods of handling personal information.
If you have any concerns or questions about this please contact our Data Protection Officer on email@example.com or write to Our Storylines CIC, Rospannel, Perran Downs, Goldsithney, Penzance, Cornwall TR20 9HG.
- How do we process your personal data?
We won’t ask you for personal information or store it unless we truly need it.
All other personal data we collect is processed by our staff and securely stored electronically and where relevant as hard copies, both of which are stored in locked cabinets in our offices.
Our Storylines CIC complies with its obligations under the “GDPR” by:
- Keeping personal data up to date
- Storing and destroying personal data securely
- Not collecting or retaining excessive amounts of data
- Enabling you to exercise your rights in regards to your personal data in accordance with requirements of the GDPR
- Protecting personal data from loss, misuse, unauthorised access and disclosure
- Ensuring that appropriate technical measures are in place to protect personal data.
- What do we use your personal data for?
The main reason for us having your data is to enable us to inform you with news, events, dates of workshops etc. This will be via our quarterly E-newsletter, which is sent via Mailchimp, or by email/telephone. Subscription services apply to our E-newsletter to which you must opt in to receive and from which you can unsubscribe at any time.
From time to time we may send you additional communications. These will only be sent where we have express permission from you to communicate in this way.
We also use it to manage our employees and volunteers.
- Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared between the staff of Our Storylines CIC for purposes connected with Our Storylines CIC. We will never sell your data. We will never share your data with third parties without your permission to do so.
- How long do we keep your personal data?
We don’t keep personal information for longer than is necessary and keep data in accordance with the guidance set out in the Information Commissioner’s Office principles on retaining personal data which can be viewed through the ICO website. https://ico.org.uk
- Accessing, changing or removing Information
You have the right to request to see the information that we hold about you and have it corrected or deleted. If you wish to make an enquiry about your data you can contact our Data Protection Officer on firstname.lastname@example.org
Following receipt of your request we will endeavour to share with you the personal data we hold on you, update or remove your personal information within 30 days.
If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law. You can raise the matter with the Information Commisioner’s Office (ICO) via their website https://ico.org.uk
- Further processing
If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.