Privacy

Egmanton Village Hall

Privacy Policy V1


Summary of how we use your data.

Egmanton Village Hall uses your personal data to manage and administer the hiring of facilities at the hall, your involvement with it and to keep in contact with you for these purposes. Where we rely on your consent, you can withdraw this at any time.

What does this policy cover?

This policy describes how Egmanton Village Hall (also referred to as “EVH”, “we” or “us”) will make use of the data we handle in relation to the hiring of EVH facilities.

It also describes your data protection rights, including a right to object to some of the processing which we carry out.  More information about your rights and how to exercise them, is set out in the “What rights do you have?” section.

We reserve the right to amend this Data Privacy Policy from time to time without prior notice.  You are advised to check our website www.egmantonvillagehall.org,uk regularly for any amendments (but amendments will not be made retrospectively).

We will always comply with the General Data Protection Regulation (GDPR) when dealing with your personal data.  Further details on the GDPR can be found at the website for information Commissioner (www.ico.org.uk). For the purposes of the GDPR, we will be the “controller” of all personal data we hold about you.

What information do we collect?

We collect and process personal data from you when you request details regarding and/or hire facilities at the Village Hall.

This includes:

  • Your name
  • Your home address, email address and phone number

How do we collect information?

EVH uses a third party system from “Google” to handle booking requests.  Google store and process the information to enable EVH to conduct their business.  In this context, EVH is the “Data Controller” and “Google” are “Data Processors”.  

Google’s privacy policy can be found here www.policies.google.com/privacy

EVH may also obtain information directly from users of the hall, especially where these are regular users.

What information do we receive from third parties?

Sometimes, we receive information about you from third party.  For example. If you are a child, we may be given information about you from your parents.

How do we use this information, and what is the legal basis for this use?

We process this personal data for the following purposes:

  • As required by EVH to conduct our business and pursue our legitimate interests, in particular:
  • We will use your information to manage and administer the hiring of facilities at EVH, and to keep in contact with you for these purposes.
  • For purposes which are required by law:
  • We may respond to requests by government or law enforcement authorities conducting an investigation.

Data Security

EVH has a duty to ensure that appropriate technical and procedural measures are taken to prevent breaches of data security.

These measurers will include:

  • Physical files containing personal data will be kept in a locked cabinet, or secure area.
  • Personal data stored electronically will be password protected with a strong password.
  • Computers and devices used to access, and process will have up to date internet security software installed and operational.
  • Only EVH (limited to 3 trustees) will have access to personal information and then only on a need to know basis and having given written assurance that appropriate data security measures are in place and procedures observed.
  • No personal data will be given over the phone unless there is no doubt as to the caller’s identity and right to access the information.
  • Information to meet a SAR (subject access request) request will only be released if evidence of identity is provided.
  • Consent to retain personal information will be recorded and updated as necessary.
  • Email correspondence on behalf of Egmanton Village Hall will use a dedicated email account, not personal emails. Emails containing personal information will be saved into appropriate secure folders and deleted from email-in-boxes and deleted files folders.
  • Personal data will be stored for only as long as it is needed or required by statute and will be disposed of appropriately.
  • To request a copy of your personal data
  • To be provided with information about how your personal data is processed.
  • To have your personal data corrected.
  • To have your personal data erased in certain circumstances.
  • To object to or restrict how your personal data is processed.

These rights may be limited, for example, if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping.

To exercise any of these rights, you can get in touch with us using the details set out below. If you have unresolved concerns, you have the right to complain to the information Commissioner’s office, as detailed below:

https://ico.org.uk/concerns/

0303 123 1113