Privacy notice - please read carefully
Last updated on 12/04/2020
The General Data Protection Regulation (GDPR) is a Europe-wide law that replaced the Data Protection Act 1998 in the UK. It is part of the wider package of reform to data protection that includes the Data Protection Act (DPA) 2018. The GDPR and DPA 2018 set out requirements for how organisations will need to process personal data from 25 May 2018.
The Silverdale District Woodbank ('the Woodbank') is a volunteer community group that carries out woodland management work to benefit local wildlife habitiats. This privacy notice tells you what to expect when Silverdale District Woodbank collects your personal information in the course of running the Woodbank.
This privacy notice will be revised as required; you are encouraged to revisit the privacy notice regularly to read the latest version.
Please read the following carefully to understand our views and practices regarding your personal data and how we will process it. By visiting https://www.sdwoodbank.co.uk and affiliated websites you are accepting and consenting to the practices described in this policy.
Our name and contact details
Silverdale District Woodbank Limited ('the Woodbank'). It is a private company limited by guarantee without share capital. Company number is 9809028.
Processing of personal data
This section of the privacy notice provides information on:
the purpose of the data processing
the lawful basis for the processing
further information where the lawful basis is legitimate interests for the processing
the categories of personal data obtained (if the personal data is not obtained from the individual it relates to).
We may use the following lawful grounds for processing personal information to support our work:
Legitimate interests: the reason for the processing is clearly defined, is necessary, is reasonable and has minimal privacy impact
Consent: cases in which you provide us with personal information in order to receive a service such as downloading data or subscribing to our news mailing list
Contract: where it is necessary for the performance of an agreement, contract or licence to which you are a party or for processes related to entering into an agreement, contract or licence
Legal obligation: if the law requires us to, we may need to collect and process your data.
Personal data we may collect from you
The personal information we may collect from you differs depending on how you interact with us, as explained here.
1. When you visit this website
When you visit the Silverdale Districk Woodbank website at small files called cookies may be added to your computer. For further information, see this page about cookies.
Lawful basis: Legitimate interest
What personal information do we process? This varies from cookie to cookie. Please see the section on Cookies for details
Retention period: This varies from cookie to cookie. Please see the section on Cookies for details
2. When you complete the Contact form or the Membership Enquiry form, or you contact a Woodbank committee member or task leader via email, phone, etc.
Lawful basis: Consent
What personal information do we process? Your name; your email address; any other personal information that you may include to us that it is deemed necessary to record
Retention period: Explanation of how long this information will be kept to be added - I suggest having a clear out at least annually and deleting any names, email addresses that are no longer required.
3. Woodbank members
The information which you provided when joining the Woodbank or renewing your membership is held by the Membership Secretary on a spreadsheet stored on a laptop. The file is secured with a password [This and all copies should be password protected]. That spreadsheet is shared with Committee Members, and any Task leaders who are not Committee Members. Paper copies of membership application or renewal forms are held by the Membership Secretary [Ideally these should be stored securely, especially if there are any bank details].
In order to access the Members section of the Woodbank website, you must have a user account. In setting this up, we ask you to provide your email address. This is processed by the website, which is uses the Wix platform, operated by Wix.com. The web managers (currently Andrew Sier and Paul Bullimore) can view these email addresses via the Wix website editor and the Wix website phone app.
Your information will be used by the Woodbank only in connection with the running of the Woodbank, which includes communicating with Members by post, telephone or email. It will never be disclosed for marketing purposes. It will not be shared with third parties without your consent.
Lawful basis: Consent
What personal information do we process? Your name; your email address; your address; phone numbers (including any emergency phone numbers you may provide) Please add any other personal information types
Retention period: Old copies of membership application/renewal forms or paper copies of the database will be destroyed and old databases held electronically deleted. If you want specific parts of the information about you that we hold to be deleted please contact the Membership Secretary. Your data will be destroyed or deleted within 28 days of your membership ending. Please check that this statement is correct.
4. When you attend a Woodbank event
When you attend an event such as a work party we may ask you to fill in a sheet with details in case of an emergency. This is done for your own safety.
Lawful basis: Consent
What personal information do we process? Your name; emergency phone number(s)
Retention period: To be added - there is now a requirement for task leaders to send these to Paul. Is the plan to keep them for 1 year, in order to compile a report for the AGM, after which they are no longer needed?
Are there any other ways in which we may interact with people and, in so doing, collect personal data on paper ro electronically? What about people we contact, e.g. landowners, Woodland Trust contacts, suppliers, etc.? If so, they should be listed here.
The details of transfers of personal data to third parties or organisations outside the UK and EEA
Your personal information will not be shared with third parties without your consent and will never be disclosed for marketing purposes. Unless otherwise indicated, your information is processed in the UK and European Economic Area (EEA). Currently the only transfers of personal data to third parties of which we are aware may take place are when:
You visit our website and a cookie collects personal information. The lawful basis for this is Legitimate interest
We are required by law to pass information to a third party. The lawful basis for this is Legal obligation.
Are there any other transfers to third parties that we should list here, such as providing information to land owners or training providers?
The rights available to individuals in respect of the processing
The GDPR provides the following rights for individuals:
The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling.
The right to withdraw consent (if applicable)
Where your personal data is processed using consent as the lawful basis, you have the right to withdraw consent at any time. You will be informed about the ways you can withdraw your consent.
The right to lodge a complaint with a supervisory authority
Initially, please raise your concern with the Woodbank via email (firstname.lastname@example.org) or via the Contact form on our website. If you feel that we have not resolved your information rights concern satisfactorily you can raise the matter with the Information Commissioner’s Office via live chat or by phoning 0303 123 1113.
How we provide privacy information
We provide privacy information via this privacy notice.
Changes to privacy information
We reserve the right to amend this privacy notice and you are advised to check it at regular intervals. We will endeavour to indicate what changes we make and the dates those changes are made.