PRIVACY NOTICE FOR PATRONS, MEMBERS, DONORS AND LENDERS
Data controller: Coastal Communities Museum Trust (CCMT)
1. Introduction
CCMT is committed to protecting the privacy and security of your personal information and to being clear and transparent about how it collects and uses that data in meeting its data protection obligations.
CCMT is a ‘data controller’. This means that we are responsible for deciding how we hold and use personal information about you. This privacy notice sets down how CCMT collects and uses personal information about you during and after your relationship with us.
CCMT is committed to protecting the privacy and security of your personal information to being clear and transparent about how it collects and uses that data and to meeting its data protection obligations.
2. Data protection principles
Personal information we hold about you must be used lawfully, collected only for valid purposes, it must be accurate and up to date and only kept for as long as necessary during your volunteering relationship with CCMT Please be assured that we do not transfer personal data to third parties or through other countries servers and all information is held within your rights as a data subject.
3. Information CCMT collects and processes
Personal data means any information about an individual from which the person can be identified. Members, Patrons, Donors and Lenders will be asked for their personal contact details, including name, title, address and contact details, including email address and telephone number.
GDPR describes other forms of ‘personal data’ called ‘sensitive personal data’; this relates to health, criminal convictions and biometric data; CCMT does not collect this type of personal information.
Data is stored securely in the CCMT’s files holding recruitment information and Volunteer information and in locked file cabinets. Some information is held on paper, some is held on the CCMT computer system which is password protected and only accessible to authorised personnel.
4. Why and how CCMT processes personal data
CCMT needs to process data to enter into communications with Members, Patrons, Donors and Lenders. We will process your personal information in order to maintain accurate, up to date contact details and to distribute newsletters, circulars or marketing materials including invitations to events Depending on your relationship with CCM we will use your details to facilitate borrowing or procurement of museum artefacts from you in order to enable efficient return of items and/or hold a record of provenance. Other reasons your details may be used would be in connection with any disputes and to facilitate equal opportunities monitoring if required
5. Data retention
CCMT will only hold your personal data for as long as is necessary to fulfil the purposes we collected it for, including any legal or reporting requirements. Paper data is disposed of confidentially and digital data is deleted
6. Who has access to data?
Your information will be shared with those Volunteers and Trustees who need contact details to arrange meetings and send information and communications to Patrons and Members, borrowers and Lenders. The Data Protection Lead also has access to all files held securely in the administrative systems of the museum.
Personal information will only be used in connection with the Coastal Communities Trust (CCMT) and ELC Museums Service (ELCMS) and will not be used for any other purposes nor will it be disclosed to any third party outside the CCMT and ELCMS.
7. Your Rights
As a data subject, you have a number of rights.
The right to be informed; why data is held and how it is used (the purpose of this Privacy Notice)
The right of access; access and obtain a copy of your data on request
The right to rectification; ask CCMT to change incorrect or incomplete data;
The right to erasure; you to ask CCMT to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
The right to restrict processing; you can ask CCMT to limit the way that your data is used for example you still want to receive information about work patterns and shifts but you no longer want to receive circulars and marketing emails
The right to data portability; this applies to digital information only. CCMT does not hold any data in format which are not transferrable via email or printed materials.
The right to object; you can ask CCMT to stop using your personal information in certain circumstances which would exclude the legitimate purpose of the organisation. You can object however to direct marketing emails and communications
Rights in relation to automated decision making and profiling; CCMT does not use personal data to make automated decisions about any of its functions
If you would like to exercise any of these rights, or believe that CCMT has not complied with your data protection rights, or you have any questions about the privacy notice, please contact the Data Protection Lead, Jo Palmer at generalccm@gmail.com
As a small, voluntary not for profit organisation, CCMT is exempt from registration with the Information Commissioner however, you can find useful information about the rights of data subjects and how your information should be handled on their website. Click here to visit the ICO website.