USAR Privacy Notice

 

Urras Stòras an Rubha needs to collect and retain certain types of personal data, in various formats, for administrative and legal purposes so that it can fulfil its functions as a community development trust.

The privacy notice explains the way in which Urras Stòras an Rubha uses or processes personal data.  Personal data are any information held either in paper records or electronically, from which you can be identified.

 

Contact details

Urras Stòras an Rubha
Old School Knock
Knock
Point
Isle-of-Lewis
HS2 0BW 

Email:  development@storasanrubha.co.uk

Website:  http://www.storasanrubha.co.uk

 

Personal Data

Personal information held by USAR with individual consent may be used for purposes associated with:

·       Personal identifiers, contacts and characteristics (for example, name and contact details)

·       Administration of membership and records

·       To promote the interests and activities of USAR, to publicise our news, events and services related to USAR

·       To inform USAR on community needs

·       To manage our employees and volunteers

·       To maintain our own accounts and records

·       To develop and maintain a database of organisations/groups in the Point area

·       To contact individuals via surveys to conduct research and consult about their opinions on current services and future plans for the Point area

 

Data Protection Obligations

The DPA and GDPR require that any personal data held should be:

·       processed fairly and lawfully;

·       obtained and processed only for specified and lawful purposes;

·       adequate, relevant and not excessive;

·       accurate and kept up to date;

·       held securely and for no longer than is necessary; and

·       not transferred to a country outside the European Economic Area unless there is an adequate level of data protection in that country.

 

Third Parties

USAR may on occasions pass your personal information to third parties exclusively to process work on its behalf.  USAR will require these third parties to comply with its Privacy Notice and GDPR regulations.

 

Data Storage

All of the data USAR holds are held secure and are password protected on our IT systems, which are backed up.  Only those who work in USAR administration have access to this for legitimate purposes.

 

Lawful Basis for Processing

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting development@storasanrubha.co.uk

(b) We have a contractual obligation.

(c) We have a legitimate interest.

 

Data Retention

 USAR will not keep personal data longer than is necessary in light of the purposes for which that data were originally collected, held and processed. When judging the retention of data we consider;

·       the current and future need of the information;

·       the costs, risks and liabilities associated with retaining the information; and

·       the ease or difficulty of making sure they remain accurate and up to date.

USAR will conduct a regular audit of records to ensure that USAR is not holding onto personal data for too long, or deleting them  prematurely. When personal data are no longer required all reasonable steps will be taken to erase or otherwise dispose of them without delay.

 

Your data protection rights

 Under data protection law, you have rights including:

·       Your right of access – You have the right to ask us for copies of your personal information.

·       Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

·       Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

·       Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

·       Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.

·       Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at Urras Storas an Rubha, Old School, Knock, Point, Isle-of-Lewis, HS2 0BW or development@storasanrubha.co.uk if you wish to make a request.

 

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at:

Urras Stòras an Rubha
Old School Knock
Knock
Point
Isle-of-Lewis
HS2 0BW 

Email:  development@storasanrubha.co.uk

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk