The General Data Protection Regulation (GDPR)

On 25 May 2018 new data protection legislation, The General Data Protection Regulation (GDPR)
comes into force across Europe. The GDPR places additional obligations on us to make sure that we
understand the personal data we hold about our clients. We're also required to ensure that all personal
data is dealt with in a structured, secure and consistent way.
As a result of the GDPR we have recently reviewed our privacy policy and an updated copy of our
privacy notice is attached.
It is important that you read our updated privacy notice as it explains:
- The information we need to collect about you and the reasons why
- How we use this information
- Any third parties we may need to share your information with
- How long we keep hold of your information
- Your rights in relation to the data we hold about you
Updated: 4th June 2018
 
 

What information do we collect about you?

  • We collect information about you when you engage with us to attend events or to provide you with inforamtion ( the newsletter).  This information will relate to your personal  circumstances only in so far as relates to your booking.. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services.
  • We may also collect information when you voluntarily complete client surveys or provide feedback to us. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. For further information visit http://www.allaboutcookies.org/. We currently do not use your information collected from the website to personalise your repeat visits to the site.

Information about connected individuals

  • We may need to gather personal information about other individuals if you are making arrangements such as events bookings for them. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us.
  •  We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them.

Why do we need to collect and use your personal data?

  •  The primary legal basis that we 'intend' to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations.
  • Where special category data is required we will obtain your explicit consent in order to collect and process this information.

How will we use the information about you?

  • We collect information about you in order to provide you with the services for which you engage us.

Who might we share your information with?

  •  We will not share your information for marketing purposes with other companies.
  • Where third parties are involved in processing your data we will have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions.
  • Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This would be in the form of password protection to enhance the security of data during transfer and/or encryption of data etc.
 

How long do we keep hold of your Information?

  •  During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship.
  •  We may also be subject to regulatory requirements to retain your data for specified minimum periods  during which we will have a legal obligation to retain your records.
  •  We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so, due to the possibility that it may be required in the case of a claim.
  • You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above.

How can I access the information you hold about me?

  • You have the right to request a copy ofthe information that we hold about you. If you would like a copy of some or all of your personal information please email or write to us using the contact details noted below.
  • We have an obligation to ensure that your personal information is accurate and up to date.
  • Please ask us to correct or remove any information that you think is incorrect.

Other websites

  • Our website contains links to other websites. This privacy policy only applies to our website so when you link to other websites you should read their own privacy policies.

 

What can you do if you are unhappy with how your personal data is processed?

 
  • You also have a right to lodge a complaint with the supervisory authority for data protection. In the UK this is:
                Information Commissioner's Office
                Wycliffe House, Water Lane
                Wilmslow
                Cheshire
                SK9SAF
                Tel. 0303 123 1113 (local rate)

 

Changes to our privacy policy

  •  We keep our privacy policy under regular review and will communicate any changes to you when they occur / place any updates on this web page.
  • This privacy policy was last updated on 4th June 2018.

 

How to Contact us

 

  • Please contact us if you have any questions about our privacy policy or information we hold about you:

                by email at: queries @pentreffest.org.uk
                Or write to us at
 
                    Data Protection Compliance Officer
                    Pentreffest
                     13 Egerton Street
                    Canton
                    Cardiff
                    CF5 1RF
 
Updated 4th June 2018