UniTED is committed to complying with the General Data Protection Regulation (GDPR) 2018. Looking after the personal information you share with us is very important, and we want you to be confident that your personal data is kept safely and securely and to understand how we use it to make your volunteering experience safer.
We would like you to understand the following:
- how and why UniTED collect information from you;
- who we share your information with, why and on what basis
- what your rights are.
If we make changes to this notice we will notify you by updating it on our website. UniTED will be what is known as the ‘Data Controller’ of the personal data you provide to us, and we will sometimes refer to ourselves in this notice as “we” or “us”. By Data Controller, this means UniTED determines the purposes and way in which any personal data are, or will be, processed.
Should you need to contact us please write to: firstname.lastname@example.org .
This privacy notice was last updated on 13th May 2018.
What information we collect when you register and why?
When you register with UniTED for volunteering or updates, or we will ask you to provide some personal information such as:
- full name
- date of birth
- contact numbers
- email address.
How do we use your information?
GDPR says that we are allowed to use and share your personal data only where we have a proper reason to do so. The law says we must have one or more of these reasons and these are:
- Contract – your personal information is processed in order to fulfil a contractual arrangement e.g. information about what UniTED does
- Consent – where you agree to us using your information in this way e.g. for contacting you and preparing your payments for the volunterring opportunitiy.
- Legitimate Interests – this means the interests of UniTED in managing our business to allow us to provide you with the best volunteering opportunity.
- Legal Obligation – where there is statutory or other legal requirement to share the information e.g. when we have to share your information for law enforcement purposes.
Keeping in touch with you
We want to keep you up to date with information about UniTED. When you sign up online, we will ask you if you want to receive updates.
UniTED will not share your information with other organisations.
If you decide you do not want to receive updates you can click a link to unsubscribe in any email from us. Alternatively, you can write to the Data Protection Officer at UniTED email@example.com. You may continue to receive mailings for a short period while your request is dealt with.
How long we keep your information
If we collect your personal information, the length of time we retain it is determined by a number of factors including the purpose for which we use that information and our obligations under other laws.
We may need your personal information to establish, bring or defend legal claims. For this purpose, we will always retain your personal information for 7 years after the date it is no longer needed by us for any of the purposes listed under How we use your information above. The only exceptions to this are where:
- the law requires us to hold your personal information for a longer period, or delete it sooner;
- you exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law;
- we bring or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible; or
- in limited cases, existing or future law or a court or regulator requires us to keep your personal information for a longer or shorter period.
What are your rights
You are entitled to request the following from UniTED, these are called your Data Subject Rights and there is more information on these on the Information Commissioners website www.ico.org.uk
- Right of access –to request access to your personal information and information about how we process it
- Right to rectification –to have your personal information corrected if it is inaccurate and to have incomplete personal information completed
- Right to erasure (also known as the Right to be Forgotten) – to have your personal information erased.
- Right to restriction of processing – to restrict processing of your personal information
- Right to data portability – to electronically move, copy or transfer your personal information in a standard form
- Right to object – to object to processing of your personal information
- Rights with regards to automated individual decision making, including profiling –rights relating to automated decision making, including profiling
If you have any general questions about your rights or want to exercise your rights please contact firstname.lastname@example.org
You have the right to lodge a complaint with a data protection regulator in Europe, in particular in a country you work or live or where your legal rights have been infringed. The contact details for the Information Commissioner’s Office (ICO), the data protection regulator in the UK, are available on the ICO website www.ico.org.uk where your personal information has or is being used in a way that you believe does not comply with data, however, we encourage you to contact us before making any complaint and we will seek to resolve any issues or concerns you may have with a high level of urgency.
Our whole Data Protection Policy and Procedures can be read here.
Should you need to contact us please write to:
Data Protection Officer UniTED
92 Highgate Hill, London, N6 5HE UK