We are the data controller of your personal data.
Legal Basis for Processing Your Personal Information
UK data protection law (the General Data Protection Regulation) requires us to have a “legal basis” for processing (using) your personal data. The legal basis we rely on are:
Where we have your specific consent to use your personal information for a specific purpose (for example, where we contact you by email).
Where we process your personal information for our legitimate interests (or those of a third party). Please see “Legitimate Interests” – below.
Where the processing of personal information is necessary to perform a contract with you (for example, where you have purchased a product from us).
Where the processing of personal information is necessary to comply with a legal or regulatory obligation that applies to us (for example, in some instances, we may be required to share your information with the Information Commissionaires Office, other regulators or law enforcement agencies) or to use your information for due diligence or ethical screening purposes.
Collecting your Data
We will collect your name, email address, geographical address and telephone number either when you register on our website, order goods from us or otherwise contact us.
We will collect your name and email only if you just sign up for our mailing list. All personal data that you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal data. You must not register under someone else’s name.
We may collect this information from you in the following ways:
Directly from you – this includes where you donate or fundraise, sign up to one of our events, purchase products from our on-line shop, communicate with us or download any of our Apps.
We may also allow advertisers and advertising networks to collect information about your computer or mobile device, activities, and geographic location to enable them to display targeted ads to you.
How we may use your Data
We will not sell your personal information (and we also do not buy personal information). We only wish to contact you in a way that is consistent with our relationship (how you would expect to be contacted and with materials you would expect to receive from us).
Our communications may include information about our objective and work, the activities we fund and the impact of your support as well as requests for donations, fundraising or other support. We will use your personal information to tailor and target our communications to you.
We will use your personal information:
To send you marketing emails where we have your consent.
To contact you by phone, if you provide the telephone number.
To send you marketing and fundraising communications by email. For more information on this, please see “Legitimate Interests” below.
So that we can fundraise effectively and efficiently (for example, by analysing and segmenting our supporters by location, demographics, previous donations or previous activities and to identify your interests and motivations and the level of support you may potentially be able to give to us).
For research and analysis purposes – this may include inviting you to participate in surveys or research or analysing usage data from our website to improve our content or user experience.
To explain to others how our work supports Schnauzers (for example, where we tell stories to explain our objectives and the work we do).
For the provision of services or administration – this may include:
Dealing with donations, including communications to confirm and say thank you, or for other administrative reasons relating to your donation.
Dealing with any transaction you enter into with us and for us to fulfil any contract with you (for example, where you purchase from our website).
Managing our events.
Dealing with entries into competitions and prize draws and any applicable prizes.
Preparing reports about our work, services and events.
When you contact us (for example, to ask questions).
If you provide any content to us.
Administering our websites and monitoring website use (to enable us to improve user experience).
Responding to your enquiries, contacts or requests about your personal information.
Notifying you about changes or updates to the website, our services or our funding processes (as applicable).
Displaying content in a device appropriate way (for example, if you are using a mobile).
For internal record keeping (we will keep a record of our relationship).
Carrying out fraud prevention (and money laundering checks), undertaking credit risk activities and in relation to legal claims we take or defend.
To safeguard those who work for or with us (or we otherwise engage with).
To process and administer your application for a job (or to volunteer).
When you register with us, you will be offered the opportunity to sign up to our marketing list to receive marketing email messages from us.
You can choose to no longer receive marketing emails from us by contacting us at email@example.com or clicking unsubscribe from a marketing email. If you do unsubscribe to marketing communications, it may take up to 5 business days for your new preferences to take effect.
Where we hold and process your personal data
Some or all of your personal data may be stored or transferred outside of the UK or European Economic Area (the EEA) for any reason, including for example, if our email server is located in a country outside the UK or EEA or if any of our service providers are based outside of the UK or EEA. You are deemed to accept and agree to this by using the website and submitting personal data to us. If we do store or transfer your personal data outside the UK or EEA, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK or EEA and under applicable laws.
A cookie is a small file which asks permission to be placed in your browser’s memory or alternatively on your computer’s hard drive. Cookies placed in your browser’s memory are called “session cookies” and cookies placed on your computer’s hard drive are called “persistent cookies”.
Session cookies are deleted when you close your browser, while persistent cookies remain on your hard drive, even after closing your browser. Session cookies are generally used to improve the user experience when using a website. Persistent cookies are generally used to store user preferences, including the preference to keep a user signed in, between browser sessions, implement security and general website operation.
We also use Google Analytics to monitor how our website is used. Google Analytics collects information anonymously and generates reports detailing information such as the number of visits to the system, where visitors generally came from, how long they stayed on the system, and which pages they visited. Google Analytics places several persistent cookies on your computer’s hard drive. These do not collect any personal data. If you do not agree to this you can disable persistent cookies in your browser. This will prevent Google Analytics from logging your visits.
Most browsers are initially set up to accept cookies. You can change your browser settings either to notify you when you have received a cookie, or to refuse to accept cookies. Please note that website may not operate efficiently, and some content may not be accessible at all, if you refuse to accept cookies.
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements and to enable us to continue to tell our story and promote the work of our funded partners (which will include reference to archive material).
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
Your data will ultimately be securely and confidentially destroyed or anonymised. Anonymisation is the process of either encrypting or removing personal information from data sets, so that it is not possible to identify individuals from the data.
Under certain circumstances, you have rights under data protection laws in relation to your personal information:
Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal information. This enables you to ask us to delete or remove personal information in certain circumstances e.g. where it is no longer necessary for us to retain it. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal information where we are relying on the legitimate interest basis (or those of a third party) or where we are processing your personal information for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your personal information which override your rights and freedoms.
Request restriction of processing of your personal information in certain circumstances.
Request the portability of your personal information to you or to a third party. We will provide to you, or a third party you have chosen, your personal information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
If you decide not to provide us with your data or to withdraw consent (where we are relying on consent to process your personal information), we may not be able to provide certain products, services to you.
If you wish to exercise any of the rights set out above, please contact us on firstname.lastname@example.org
No Fee usually required
You will not have to pay a fee to access your personal information (or to exercise any of the other rights above). However, we may charge a reasonable fee if your request is unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We take appropriate technical and organizational measures against unauthorised or unlawful processing of your personal data and against accidental loss or destruction of, or damage to, personal data. All information you provide to us is stored on our secure servers.
Where we have given, or you have chosen a password, you are responsible for keeping this password confidential.
However, no system can be completely secure. Therefore, although we take steps to secure your personal data we do not promise that your personal data will always remain secure.