Committed to using your personal data responsibly and in accordance with the law.
PERSONAL DATA PRIVACY NOTICE
St. Peter’s Malawi Education Trust (SPMET) is a small charity with a limited need to collect and process data from our donors, other supporters, volunteers and other contacts (collectively, “our Contacts”) . As such we have not considered it necessary to register under the Data Protection Act 1998.
However, the implementation of the EU General Data Protection Regulation (GDPR) in May 2018 and the upcoming new Data Protection Act impose new obligations on SPMET in relation to personal data, which this notice addresses.
Personal Data
For the purpose of this notice, the term “personal data” means data relating to a living individual which allows that person to be identified. Such identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession.
SPMET is unlikely to acquire personal data from any source other than the individual identified by the data or someone acting on such individual’s behalf and with their knowledge.
Data Controller
SPMET is the data controller (contact details below) as it decides how personal data is processed and for what purposes.
How SPMET Uses Personal Data
SPMET acquires personal data in various ways including through our website
We use your personal data for the following purposes: -
•To maintain records of our contacts who have expressed an interest in SPMET’s work and to send communications about the activities of SPMET, to such individuals from time to time;
•To fundraise for SPMET, which will include processing of donations by means of Gift Aid or similar tax efficient arrangements;
•To manage our employees (if any) and volunteers;
•To maintain SPMET’s accounts and records;
SPMET does not access bank account, credit card or similar financial data from donors, [although the agencies through which it collects some donations (Virgin Giving and Just Giving) may have such information].
Security and Other Matters
SPMET is committed to ensuring that personal data is maintained securely and is protected from loss, unintended destruction or damage and from unauthorised or unlawful processing; it has put in place suitable physical, electronic and organizational procedures.
SPMET will not collect or retain excessive amounts of personal data and will, to the extent it is able, keep the personal data it needs up to date.
Retention
Personal data will be retained in relation to each of our contacts and volunteers as long as relevant law requires or, if longer, so long as we consider there to be an ongoing relationship an individual. After that time such data will be securely destroyed.
Legal Basis for Processing Personal Data
Personal data is processed on the following bases:
•For our contacts and volunteers, explicit consent of the individual in relation to one or more of the data uses set out above.
.
Sharing Personal Data
Subject to the following or to the requirements of any relevant law, personal data will be treated as strictly confidential and will only be shared among the trustees of SPMET and SPMET will not share personal data with third parties. Personal data may also on occasion be shared with volunteers working with SPMET.
Personal data may also need to be shared with tax authorities to allow for tax reclaims or other processing of donations qualifying for tax benefits.
Rights in Relation to Personal Data
Unless subject to an exemption under the GDPR, individuals have the following rights with respect to their personal data:-
•The right to request a copy of any personal data which SPMET holds;
•The right to request that SPMET corrects any personal data if it is found to be inaccurate or out of date;
•The right to request that personal data is erased where it is no longer necessary for the SPMET to retain such data;
•The right to withdraw consent to the processing at any time
•The right to request that SPMET provide a copy of personal data, and where possible to transmit that data directly, to another data controller, (where applicable).
•The right, where there is a dispute in relation to the accuracy or processing of personal data, to request a restriction is placed on further processing;
•The right to object to the processing of personal data, (where applicable)
•The right to lodge a complaint with the Information Commissioners Office.
Further processing
If SPMET wishes to use any individual’s personal data for a new purpose, not covered by this notice, then we will provide that person with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, SPMET will always seek such individual’s prior consent to the new processing.
Contact Details
To exercise all relevant rights, queries or complaints please in the first instance contact Louisa Salisbury at Stpetersmalawi@gmail.com
You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.
May 2018