Rotary Club of Lincoln Colonia Privacy Notice

ROTARY CLUB OF LINCOLN COLONIA

Local Data Protection Policy

This policy applies to all club members, club officers and volunteers or any individual or organisation working on behalf of The Rotary Club of Lincoln Colonia

The purpose of this policy:

·      to ensure person identifiable data is controlled and processed in a manner which respects individual rights and our legal obligations

·      to provide club members and volunteers with the overarching principles that guide our approach to data protection.

We will seek to keep personal data secure and accurate by:

Awareness

·      Ensuring all club members and volunteers are aware of the need to protect personal identifiable data

·      Designating a club officer (council member) with specific responsibility for Data Protection

Information we hold

·      We will maintain a personal identifiable data (PID) register

·      Only personal identifiable data (PID) necessary to The Rotary Club of Lincoln Colonia. to carry out its activities as defined in the club objectives will be held. This will include data on the following subjects

o   Club Members

o   Club officers

o   Children (recipients of charity services)

o   Adults (recipients of charity services)

o   Fundraisers

o   Volunteers

o   Donors

o   Others

Communicating privacy

·      We will publish a data privacy statement on our website

·      We will display/publish a data privacy statement at our public events

Individuals rights

·      Subject access requests will be responded to with information in a format accessible to the subject

·      Individuals have the right to request information we hold is amended or deleted

·      Individuals have the right to restrict how The Rotary Club of Lincoln Colonia  processes their data

·      We will respond to Individual requests within the required timescales

 

Subject Access Requests

·      We will respond to Subject Access requests in the UK for data which we hold in accordance with the timescales and requirements of the EU GDPR and UK Data Protection Act

Lawful basis for processing personal data

·      Person Identifiable Data will only be processed by The Rotary Club of Lincoln Colonia where there is a legitimate reason to access the data in carrying out the defined objectives of the charity. Specifically

o   Charity Service Recipient data is processed on the basis of consent

o   Donor & fundraiser data is processed on the basis of consent

o   Volunteer data is processed on the basis of Agreement

Consent

·      Donors and fundraisers will give consent to The Rotary Club of Lincoln Colonia to hold and process their data as part of the donation and fundraiser registration

·      Individual recipients of charity services will give consent to The Rotary Club of Lincoln Colonia to hold and process their data

Children

·      The Rotary Club of Lincoln Colonia does not offer any online services to children.

Data Breaches

·      Any data breach (or suspected breach) will be referred to the Data Protection Lead who will be responsible for investigating the breach/potential breach and if required reporting to the RIBI Data Protection Lead who will in turn report if required report to the Information Commissioner Office (ICO) as required under GDPR.

·      Risk assessments will include an assessment of the risk of data breaches

Data protection by design and Data protection impact assessments

·      Recording and storing information professionally and securely

·      Maintaining a personal identifiable data (PID) register

·      No automated decision making (including profiling) based on individual’s data will be carried out.

Data Protection Officer

·      A Data protection officer (DPO) is not required to be assigned locally

Registration

·      RIBI as the responsible legal organisation will be responsible for registering for payment of a data protection fee with the Information Commissioners Office (ICO).

 

International

·      As The Rotary Club of Lincoln Colonia does not operate in any EU states other than the UK the lead data protection authority will be the UK Information Commissioners Office (ICO).

General

·      Providing effective management for members and volunteers through supervision, support, training and quality assurance measures

·      Ensuring we have effective complaints and whistleblowing measures in place

Record Retention & Disposal

·      Personal Identifiable data collected as part of an event or project will be held for the duration of the project the data was collected for and for a further period of no more than six months (unless there is a statutory requirement to hold data for longer periods).

Legal Framework

The policy has been drawn up on the basis of law and guidance, applicable within the UK, that seeks to protect children, namely:

·      Data Protection Act 1998

·      EU General Data Protection Regulations (GDPR) 2016 (UK enforceable May 2018)

·      Computer misuse act 1990

·      Human Rights Act 1998

This policy should be read alongside all other Rotary Club of Lincoln Colonia and RIBI  Policies


Contact Details

Data Protection Lead (club officer)

Name

Email

We are committed to reviewing our policy and good practice annually.

This policy was last reviewed on  15th May 2018

Signed :

(President)

Cookies:

Like most websites, we use “cookies” to help us make our site, and the way you use it, better. We do not store any personal data in the cookies that we use.
Cookies mean that a website will remember you. They’re small text files that sites transfer to your computer (or phone or tablet). They make interacting with a website faster and easier – for example by automatically filling your name and address in text fields.

In addition, the type of device you’re using to access our website or apps and the settings on that device may provide us with information about your device, including what type of device it is, what specific device you have, what operating system you’re using, what your device settings are. Your device manufacturer or operating system provider will have more details about what information your device makes available to us.

The type and quantity of information we collect and how we use it depends on why you are providing it. You should be able to control what cookies are placed on your device through your browser settings. Go to www.aboutcookies.org to find out more about cookies, including how to see what cookies have been set and how to manage and delete them.

We use Google Analytics to analyse the use of our websites by generating statistical and other information.

Details captured during your visit to our websites will include, but are not limited to, traffic data, location data, weblogs and other communication data and the resources you access. However, all data collected is anonymous and will not identify you as an individual.

Google, not the Association, stores this activity information. You can view Google’s privacy notice here.

To opt out of being tracked by Google Analytics across all websites visit their website here.

Accessibility

Every effort has been made to ensure that the original template pages for this site are W3C compatible.

However, as the content of pages is supplied by the club, such content may not be compatible.