Under the General Data Protection Regulation (GDPR), individuals have a right to be informed about how an organisation uses any personal data held about them. This privacy notice explains how Emma Brown VA collects, store and uses personal data about individuals. Emma Brown is the data controller for the purposes of data protection law.
THE PERSONAL DATA HELD
Personal data that Emma Brown VA may collect, use, store and share (when appropriate and with permission from you) about you includes, but is not restricted to a name, an ID number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, political, cultural or social identity.
Emma Brown VA may hold data about you that has been received from other organisations.
WHY YOUR DATA IS USED
Individual's personal data may be used for several reasons, including (but not limited) to:
● Contacting you
● Providing day to day administration
● Amending diary entries
● Providing information to processors
● Accessing social media accounts
● Providing customer service support
● Assessing our services
● Providing testimony for our services (pending consent)
Emma Brown VA only undertakes these tasks when it is necessary and does not process your data for reasons different to those specified at the time consent is given by you.
USE OF YOUR PERSONAL DATA FOR MARKETING PURPOSES
Where you have given consent to do so, Emma Brown VA may send you marketing information by email to inform you of developments that may occur in the future (for example, to provide special offer details). You can withdraw consent at any time, by emailing email@example.com. Your details will not be passed to any other organisations for marketing.
LEGAL BASIS FOR USING THIS DATA
Emma Brown VA only collects and uses your personal data when the law allows. All processing will occur under one or more of the six lawful reasons for processing as defined in Article 6(1) of the GDPR. The majority of the time, processing will occur due to Article 6(1)a. (the “data subject has given consent to the processing of his or her personal data for one or more specific purposes”).
If you have provided consent to use your data, you may withdraw this consent at any time by emailing firstname.lastname@example.org.
COLLECTING THIS INFORMATION
Whenever Emma Brown VA seeks to collect information from you, it will be made clear whether you must provide this information (and if so, what the possible consequences are of not complying), or whether you have a choice.
HOW EMMA BROWN VA STORES THIS DATA
Personal information about you will be kept when you have made an inquiry about becoming a customer, for a period of 60 days from last communication, unless you become a customer or if you have consented to further contact. This period has been chosen to allow the individual time to make decisions on proceeding. If you become a customer, your information will be kept for 60 days after work completion, unless it is necessary by law to retain data. Where you have opted to receive marketing information, your details will be kept on file until you unsubscribe. No more information than is necessary to complete tasks will be retained.
HOW TO MAKE A REQUEST ABOUT YOUR DATA
You have rights to access the data Emma Brown VA holds about you. In addition to requesting a copy of the personal data held about you, you also have the right to know:
● the purposes of your processing;
● the categories of personal data concerned;
● the recipients or categories of recipient Emma Brown VA disclose the personal data to;
● your retention period for storing the personal data or, where this is not
possible, your criteria for determining how long you will store it;
● the existence of their right to request rectification, erasure or restriction or to
object to such processing;
● the right to lodge a complaint with the ICO or another supervisory authority;
● information about the source of the data, where it was not obtained directly
from the individual;
● the existence of automated decision-making (including profiling); and
● the safeguards you provide if you transfer personal data to a third country or
Emma Brown VA does not promote the use of automated decision-making in any of its processing.
If you wish to exercise any of these rights, please email email@example.com with details of your request, which will be dealt with as quickly as is possible, provided requests are not excessive as per Article 12(5).
Emma Brown VA does not share information about you with any third party without consent unless legally required, or it is a processor that underpins services (for example, the cloud providers used.) Only those processors who have as strong a pledge to GDPR as Emma Brown VA does are used. No processors are used unnecessarily. Details of data processors can be supplied by emailing firstname.lastname@example.org if required.
TRANSFERRING DATA INTERNATIONALLY
Where it is necessary to transfer personal data to a country or territory outside the European Economic Area (for example, where cloud services are based in the US), only processors from countries with strong data protection laws will be used, as per the GDPR.
If you have any issues regarding personal data or data protection, please contact:
Data Protection Officer: Emma Brown