How your data is collected
1.1 Who collects your data
Ellen Morrison is the controller of your data and is responsible for the collection and processing of your data. We can be contacted at firstname.lastname@example.org
1.2 What data is collected
At a minimum we collect basic personal data and contact details. Additional information we may ask you to provide includes but is not limited to geographic information (for example, your postcode and constituency), your willingness to volunteer, your date of birth, gender, ethnicity, employer and occupation, whether or not you are a member of a political party, trade union or other organisation, and whether or not you are a student.
We will also collect information such as your Internet Protocol (IP) address for monitoring and improving the effectiveness of our website services as well as its security.
1.3 Where we obtain your data from
In most cases, we will obtain your data directly from you, using an electronic or physical form, or verbally.
We may sometimes supplement your data with other publicly available information where we have your consent to do so, where it is necessary to do so in order to comply with a contract we have with you, one of our legal obligations or legitimate interests, or where you have given other organisations permission to share your data with us.
2. How your data is kept secure
2.1 What we do to keep your data secure
We have agreements with all third-party service providers we use in order to process your data to ensure that they take appropriate measures to ensure the security of your information.
We ensure that all individuals who have access to your data sign data protection agreements and non-disclosure agreements, which detail their duties to keep your data secure and not to disclose it to anyone else without our authorisation.
2.2 Who has access to your data
We will never sell your data but sometimes it is necessary to share your information with our service providers or with data processors. Data is only ever shared where we have a lawful basis to do so.
2.3 International Transfers
In order to process your data for the purposes outlined below, we may need to transfer your data to countries or jurisdictions outside the EEA. In each case, we ensure that our suppliers provide adequate protection for the rights of data individuals in connection the transfer of their personal data. We expect all suppliers to use a standard contractual clause approved by the European Union or be subject to Privacy Shield scheme in the United States.
3. How your data is processed
We will process your data and contact you for the following reasons:
· To inform you about the campaign and campaigns we support
· To let you know how you can help support and/or fund our campaigns and campaigns we support
· To let you know how you can campaign with us and with campaigns we support
· To let you know how you can volunteer with us
Other purposes for which we may process your data include:
· Complying with our legal obligations
· Answering your enquiries
· Responding to complaints
4. The bases on which we process your data
We process your data on the following bases:
· Legal obligation
· Legitimate interest
We process most of the data that we hold on the basis of consent. At times, we process your name and contact details, payment details and additional information about you and your views, interests and activities you take part in on the basis of consent. Where we process your data on the basis of your consent, that processing of your data will be restricted to those types of processing for which we have received your consent and we shall indicate which categories of data we are going to process on the basis of your consent.
If it is necessary for us to process your data in order to comply with any other contracts we may have with you, then when we enter into the contract with you we will inform you of this, as well as informing you of the types of processing that it will be necessary for us to carry out, the categories of data that we will process and the purposes of our doing so.
5. How we will communicate with you
For any direct “marketing” communications about our campaigning we will only contact you via email or text if we have your permission to do so. We may occasionally send you campaigning materials through the post or telephone you without your consent if in the circumstances we have a legitimate interest to do so.
You may also see campaigning online and on some social media sites if you have interaction with us before.
To respond to your queries we will contact you either via the medium you used to contact us or by a medium you have indicated you would like us to respond with. If it is necessary to contact you for any administrative purposes then we will usually try to email, text or call you, usually in that order, depending on what contact details we have available for you.
6. How we protect children’s privacy
No information should be submitted or posted to us by children under the age of 14 without prior consent of their parent or guardian.
7. How you can affect the way we communicate with you
When you interact with us, we will ask you to tell us how you prefer to be contacted.
You can unsubscribe from contact or make data subject requests at any time by emailing email@example.com
The requests you can make include requests that you have a right to make under data protection law. These are requests to access or rectify your data and requests for us to restrict the ways in which we process your data, provide you with the data we hold on you in a portable format and log an objection you have to our processing of your data.
You also have the right to ask us to erase data that we hold on you.
8. How to find out more or make a complaint
If you would like to make a complaint to us about how your data is processed please email firstname.lastname@example.org
You also have a right to make a complaint to the Information Commissioner’s Office.