The Association's data protection obligations
To manage the Association's membership, the Association will process personal data about its members, the data including: full name, postal address, e-mail address, and landline and/or mobile phone numbers. If relevant, the Association may also collect and hold details about plot and/or polytunnel rentals, other payments made (such as for mesh) and refunds paid out. Where refunds are paid by electronic funds transfer, bank account details of the recipient will be available to the Treasurer and, where appropriate, one other countersignature of the Association cheques who also has Internet access to the the Association bank account.
Collection of personal data
Personal data is acquired when an a lease is signed and when a leasee corresponds with the Association. This personal data could relate to applications for membership, requests to rent a plot or polytunnel, or any other communications relating to your membership of the the Association.
The Association web site (currently at www.edelsten.org.uk/CCAA ) will log the activity of visitors including: the number of visitors to the web site, where visitors have come to the site from (IP address), the pages visited, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, the full Uniform Resource Locators (URL), page response times, and length of visits to certain pages.
To meet requirements of the GDPR, the Association will:
The Association processes personal information for a number of reasons, including:
The Association will not use personal information:
Disclosure of personal information
the Association may disclose personal data as might be required by law, including compliance with any court order or legal obligation.
The GDPR provides you with a number of rights in relation to your personal data. These include rights to the rectification or erasure of your personal data, and to restrict or object to its processing.
If you find that any of the personal data that the the Association holds about you is inaccurate, incomplete or contains errors, notify the Association in writing and the Association shall undertake to make the appropriate corrections at the earliest opportunity.
Should you wish to have some or all of your personal data erased, the Association will endeavour to do so although there may be instances where legitimate interests or the performance of the Association's statutory obligations prevents the Association from doing so.
If you wish to object to or restrict how your personal data is processed by the Association, you can do so by writing to the Association. However, be aware that such requests could result in an inability to provide you with some or all of the Association's services.
You may request that Association provides the personal data that the Association holds about you to another data controller in a structured, commonly used and machine-readable format.
You may request to be told whether or not personal data about you is being processed by the Association. If your personal data is being processed, you are entitled to receive a response from the Association that provides you with a description of that personal data, the purpose for which it is processed, the recipients or category of recipients to whom that data is disclosed (including any recipients located outside the EEA), the source of the personal data, and information about its retention and storage. A copy of the personal data that is undergoing processing shall be provided to you. To make such requests, e-mail the Association.
Changes to this policy
Version date: 30 May 2018