
Privacy
Privacy
Privacy
- INTRODUCTION
At St Martin-in-the-Fields Charity we are committed to protecting and respecting your privacy and all personal data is held by us and processed in accordance with the Data Protection Act 2018 and UK General Data Protection Regulations (UK GDPR). St Martin-in-the-Fields Charity is a registered charity, registration no 1156305/261359. We are also registered as a data controller with the ICO, registration number ZA222666.
The terms data controller, data processor, personal data and processing all bear their legal meanings under the Data Protection Act 2018. The word ‘process’ covers most things that can be done with personal data, including collection, storage, use and destruction of that data.
This Privacy Notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us when you contribute to any of our Frontline Network blog or discussion board. It also explains the rights you have around your data, including the right to access it, and to object to the way it is processed.
- INFORMATION WE COLLECT ABOUT YOU
‘Personal data’ is any information that relates to a living, identifiable person. This data can include your name, contact details, and other information we gather as part of your use of the Frontline Network. In general terms, we process your data in order to manage our relationship with you.
When you register to become a member of the Frontline Network, we will request during your application your name, work email address, work details along with the contact details of your manager, this is to allow for the validation of your application, and to continous management of your membership with the Frontline Network.
When you subscribe to our newsletter e-news (as part of your Frontline Network membership or via the web site registration form), we would ask for your name, email address, the name of your associated organisation and note your preference.
- INFORMATION YOU SUBMIT TO THE FRONTLINE NETWORK ABOUT OTHER INDIVIDUALS
You should not disclose any confidential information relating to yourself or a 3rd party on any of our online platforms, the responsibility remains with the person who made the information public and will be fully liable for any inappropriate 3rd party data disclosure.
It is recommended that articles and stories regarding a 3rd party should be anonymised so that it is not possible to identify said individual from the information published. Where this is not possible or appropriate, you should obtain full written consent from said 3rd party before any data is disclosed / made public.
- MARKETING
All communications are to assist our members in delivering our community’s objective, from information sharing, latest legislation changes, training and funding availabilities, all are considered the administration of your membership as a member of the Frontline Network, and not marketing of a service or product.
- RESEARCH
Wherever we use your personal data for research purposes we will seek to anonymise or at least ‘key code’ this information first so that you cannot be identified from the data processed. Where this is not possible, your information will be held securely and processed in accordance with the legal grounds, strict safeguards and exemptions provided by the UK GDPR in relation to the processing of such personal data. We will not disclose any research results which contain any personal data that enables you to be identified, unless required to do so by law.
- DISCLOSURE OF YOUR INFORMATION
We will always process your information in a secure and confidential manner and will not disclose to any third party for their own purposes without a legal ground to do so under the data protection laws, such as your consent. Where we use a third-party supplier to support our operation, they will be a “data processor” in line with the definition under the UK GDPR and will only process and securely handle your data in line with our specific instructions. These may include independent researchers hired to undertake research as part of our ongoing monitoring and evaluation and software providers for running our operation.
- SECURITY
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure suitable physical, electronic and managerial procedures in line with industrial standards to safeguard and secure the information we collect online are in place.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site. Once we have received your information, we will use strict procedures and security features to prevent unauthorised access.
- WHERE AND HOW WE STORE YOUR PERSONAL DATA
All information you provide to us is stored on our secure servers within the UK. Some of our service providers may be based outside of the UK, in all instances their organisational security measures will be assessed and compliant with the appropriate data protection legislations / international security framework, this will be confirmed before any data is shared.
Data collected will be deleted once we no longer have a lawful basis to retain, and no other legislations require their retainment, e.g. The Financial Act, Limitation Act etc. Data will be erased in line with our legal obligations as per defined under the UK GDPR and our Data Retention Policy.
- YOUR RIGHTS
The UK GDPR gives individuals rights in the handling of their personal data, as listed below:
- Right to be informed: organisations must tell individuals what data is being collected, how it’s being used, how long it will be kept and whether it will be shared with any third parties.
- Right of access: individuals have the right to request a copy of the information that an organisation holds on them.
- Right of rectification: individuals can request the correction of inaccurate or incomplete data.
- Right to be forgotten: in certain circumstances, individuals can ask organisations to erase any personal data stored on them.
- Right of portability: in some circumstances, individuals can request that an organisation transfer any data that it holds on them to another company/organisation.
- Right to restrict processing: in some circumstances, individuals can request that an organisation limits its use of personal data.
- Right to object: individuals have the right to challenge certain types of processing, such as direct marketing.
- Rights related to automated decision making, including profiling: under most circumstances, individuals have the right to object to having decisions made about them by automated processes or profiling
- CONTACTS
Should you have any questions, comments or concerns regarding this privacy notice or the way in which we handle your personal data please contact us in the first instance at:
frontline@stmartinscharity.org.uk
or call us on 020 3795 5745.
Alternatively, you can write to us at:
St Martin-in-the-Fields,
Runway East,
24-28 Bloomsbury Way,
London WC1A 2SN
You can also complain to the ICO if you are unhappy with how we have used your data, their details:
Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk