Aboyne and District Men’s Shed
What data to we collect?
The Aboyne and District Men’s Shed (hereafter “The Shed”) maintains a database of information on membership and user groups. This is for operational reasons, communication, security, charity reporting and fundraising purposes. The information held is kept to a minimum that is necessary to safely and effectively run the shed.
Trustees and Management Committee members may have to provide additional personal information from time to time, depending on the requirements of official paperwork, fundraising, charity-related activities or facilities management of the Shed. This information will be requested directly from the relevant individuals if necessary.
How do we collect your Data?
You directly provide The Shed with the data we collect, through the Membership, and Shed use Application Form. By signing the membership and shed user form you are providing written consent to hold this data.
How will we use your data?
The Shed collects minimal personal data so that we can report on membership numbers. This is a requirement for OSCR charity reporting and can be useful for fundraising.
Your contact information will be used only to contact you directly; primarily to advise of upcoming meetings, or any other relevant activities of The Shed.
For bulk email communications we will use the BCC function to prevent your email address being released to other members. Subsequent emails between The Shed members are excluded from this policy as we have no control over the use of your email address by any member who may separately learn of it.
We will never share your data with third parties, unless legally obliged to do so.
You can opt out of receiving Shed e-mails at any time just contact email@example.com
How we store your data?
The database of members is securely stored in a password-protected spreadsheet. Only the relevant Trustees and Management Committee members have access to this information.
The Shed will keep the personal data that you provide for the duration of your membership. If you decide to cancel your membership, all personal data held against your listing will be deleted within 4 weeks of your request to cancel.
As stated above, we will never forward your data to third parties or use it for marketing purposes.
What are your data protection rights?
To ensure compliance with GDPR guidelines, you have the following data protection rights:
- Right to access– you can request that The Shed send you copies of the personal data that we hold on you
- Right to rectification– you can request that The Shed corrects any data that you believe is inaccurate, or complete any information that you believe is incomplete
- The right to erasure– you can request that The Shed erases all of your data. By doing so, your membership will be revoked.
- The right to restrict processing – you can request that The Shed restricts the processing of your data
- The right to object to processing– you have the right to object to The Shed processing your data
- The right to data portability – you can request that The Shed transfers the data that we have collected on you to another organisation, or directly to you.
If you make one of these legal requests, The Shed has one calendar month to respond to you. Please contact one of the Trustees if you would like to exercise any of these rights.
What are cookies?
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit our website, our hosting service (WordPress) may collect information from you automatically through cookies or similar technologies.
The Shed is not privy to any cookies collected by WordPress. If this becomes available in the future, we will never use or process this information. More information about WordPress cookie usage can be found here: https://en-gb.wordpress.org/about/privacy/cookies/
Privacy policies of other websites
Our privacy policies stated above only apply to The Shed and it’s own website – If you visit any of the other websites linked from this site, please read their privacy policies.
How to contact us
For contact information, please use, firstname.lastname@example.org
How to contact the appropriate authorities
Should you wish to report a complaint, or if you feel that The Shed has not addressed your concerns in a satisfactory manner, you may contact the Information Commissioner’s Office (ICO). https://ico.org.uk/global/contact-us/
CCTV privacy notice
Your information is being collected to use for the following purposes:
- The prevention, investigation and detection of crime (particularly, but not restricted to, vandalism or the theft of property) and the apprehension and prosecution of offenders
- To enhance the safety of Shed users
The legal basis for collecting the information
Task carried out to assist the safe running of the Shed.
Your information will be shared with the following recipients or categories of recipient
Any incidents revealed will be brought to the attention Trustees responsible for the premises in question. This may involve making a copy of the storage media or a screen print, which may be used as evidence in any subsequent reporting to appropriate authorities.
In cases of suspected criminal activity the storage media will normally be passed to the police for investigation and possible prosecution.
The police and other law enforcement agencies may, on showing good cause, request copies of storage media. In general such requests will be complied with.
Retention period for the data
All images will be retained for a certain period. After this period the images are permanently deleted, unless required for an ongoing issue which has been identified (for example if a crime has been observed and recorded or if the images have been retained while another subject access request is being processed). In such cases images will be retained for a long as necessary (for example until the conclusion of any criminal proceedings arising from the incident).
Please note that you have the following rights:
- to withdraw consent at any time, where the legal basis specified above is consent
- to lodge a complaint with the Information Commissioner’s Office
- to request access to your personal data
And also with effect from 25th May 2018:
- to data portability, where the Legal basis specified above is consent or performance of a contract
- to request rectification or erasure of your personal data, as so far as the legislation permits