Active Communities CIC

Privacy policy

Active Communities CIC

Reviewed Date: September 2024

1. Introduction

At Active Communities CIC we are committed to ensuring the privacy and protection of individuals’ personal data. This Data Protection Policy outlines our approach to handling personal data responsibly, securely, and in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and any other relevant local regulations.

2. Data Protection Principles

We adhere to the following principles when processing personal
data:

  • Lawfulness, Fairness, and Transparency: We process personal data lawfully, fairly, and in a transparent manner, ensuring that individuals understand how their data will be used.
  • Purpose Limitation: We collect and process personal data only for specified, explicit, and legitimate purposes, and we do not use it for purposes incompatible with those purposes.
  • Data Minimisation: We ensure that personal data is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
  • Accuracy: We take reasonable steps to ensure that personal data is accurate, complete, and up-to-date. Individuals have the right to request corrections.
  • Storage Limitation: We retain personal data only for as long as necessary for the purposes for which it was collected.
  • Integrity and Confidentiality: We implement appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction.
  • Accountability: We demonstrate compliance with data protection principles and have mechanisms in place to address data protection inquiries and breaches.

3. Data Collection and Use

  • We collect and process personal data for the following purposes: Monitor numbers of people taking part in activities and evaluate the work we are doing.
  • We only collect and use personal data that is necessary for the intended purposes.
  • Payment data where Square is used to process a payment. This will only be stored for the purpose of any future payments. A participant can request that data is not stored by speaking with the session coach at point of payment.
  • Individuals are informed about the collection and use of their data through privacy notices and consent forms when applicable.

4. Data Security

  • We implement technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, and destruction.
  • Access to personal data is restricted to authorised personnel who need it for their job responsibilities.
  • We regularly review and update our security measures to address emerging threats and vulnerabilities.

5. Data Subject Rights

  • Individuals have the following rights regarding their personal data:
    • The right to access their data.
    • The right to rectify inaccuracies.
    • The right to erasure (in certain circumstances).
    • The right to restrict processing (in certain circumstances).
    • The right to data portability.
    • The right not to be subject to automated decision-making.
  • Data subjects can exercise these rights by contacting our Data Protection Officer (DPO), Darren Huart.

6. Data Breach Management

  • We have procedures in place to identify, report, and manage data breaches. Any breaches will be reported to the relevant authorities and affected individuals when required by law.

7. Data Protection Officer (DPO)

  • Our designated Data Protection Officer, Darren Huart [Director], is responsible for overseeing data protection compliance and serving as a point of contact for data subjects and supervisory authorities.

8. Data Sharing

·      We will not share personal information unless there is an emergency (for example, for medical purposes) or you are told we will share this for evaluation purposes.

·      We may use data about attendance at activities anonymously (this means we remove identifiable personal information) to show how we are performing. These details will be stored on a system for up to one year after the project ends. After this year all records will be deleted. This article offers free shipping on qualified products, https://www.fakewatch.is/product-category/richard-mille/rm-11-03/ or buy online and pick up in store today at Medical Department.

·      If we take a photograph of at an event that clearly shows a face, we will always ask for permission in line with our
Photgraphy Policy. And participants have the right to withdraw consent at any time.

9. Review and Updates

  • This Data Protection Policy will be reviewed periodically and updated to ensure continued compliance with data protection laws and organisational needs.

10. Contact Information

If you have any questions, concerns, or requests regarding the processing of personal data or this policy, please contact our Data Protection Officer:

Darren Huart (ActiveCommunities@mail.com)

12. Conclusion

This Data Protection Policy reflects our commitment to data protection and privacy. It is essential for all members of our organisation to uphold these principles and comply with data protection laws.

Active Communities CIC.