We recognize the need to respect and protect the need to respect and protect information disclose to us that is called Personal Information (explained below.)
This notice is intended to tell you how we use your Personal Information and describes how we collect and use your Personal Information during your stay with us. We are committed to handling data fairly and lawfully taking the data protection obligations seriously. We ensure that we process the Personal Information in compliance with the General Data Protection 2018 ("GDPR").
1.1 What is Personal Information
For the purposes of this Data Protection Policy "Personal Information" consists of any information that relates to you and/or information from which you can be identified, directly or indirectly. For example, information which identifies you may consist of your name, address, telephone number, photographs, location data, an online identifier (e.g. cookies identifiers and your IP address) or to one or more factors specific to your physical, physiological, genetic, mental, economic, cultural or social identity. When we combine other information (i.e. information that does not, on its own, identify you) with Personal Information, we treat the combined information as Personal Information.
2.TYPES OF PERSONAL INFORMATION WE COLLECT
We collect, use, store and transfer different kinds of Personal Information about our subscribers, volunteers and donors.
2.1 Subscribers to our mailing lists
We collect Name, Email and Location.
2.1.1 How is your Personal Information Collected
We collect information through our subscription forms found on our website and feedback forms distributed to the attendees at our events.
2.1.2 How we use your Information
We use name and email to inform you about your chosen updates and events. Location information is used to send you updates and events that are relevant to your location.
2.1.3 Data Retention
Subscribers will continue to receive email updates until they wish to unsubscribe. The option to unsubscribe will be provided on each email updates sent by us. We will keep information about unsubscribe for a year to avoid them from being by accident. If you would like complete erasure before one year period, feel free to contact us after you have unsubscribed.
2.1.4 Data processor used to process and store your Personal Information
We use MadMimi email marketing platform (https://madmimi.com/) to process the subscriptions. They use GDPR compliant security levels.
In order to see how people respond to our emails we have email views and clicks tracking enabled in Madmimi. We may send extra event information (such as event reminders) to people who show more interest. You are welcome to disable views and clicks tracking in the following manner. When you receive our mail:
• Click the “Preferences” button that’s automatically included with each email.
• Check the link in the automated email you will receive to access your Subscription Management page.
• Tick “Don’t collect data about my email views and clicks”
• To save the changes click “Update”.
2.2. GOOGLE ANALYTICS
We use Google Analytics to analyse the use of our website by mean of cookies. The information gathered
2.3. Combining Personal Information
We may combine the Personal Information that we collect from you to the extent permitted by applicable law.
3.TO WHOM WE DISCLOSE YOUR INFORMATION
We will only use your Personal Information for internal purposes only. We do not share your information with third parties.
4. ACCESSING YOUR PERSONAL INFORMATION AND OTHER RIGHTS YOU HAVE
We will collect, store and process your Personal Information in accordance with your rights under any applicable General Data Protection Regulations. You have the following rights in relation to your Personal Information:
a) Subject Access - you have the right to request details of the Personal Information which we hold about you and copies of such Personal Information.
b) Right to Withdraw Consent – where our use of your Personal Information is based upon your consent, you have the right to withdraw such consent at any time. In the event you wish to withdraw your consent to processing, please contact us using the details provided in clause 8 below.
c) Data Portability – you may, in certain circumstances, request us to port (i.e. transmit) your Personal Information directly to another organisation.
d) Rectification – we want to ensure that the Personal Information about you that we hold is accurate and up to date. If you think that any information we have about you is incorrect or incomplete, please let us know. To the extent required by applicable laws, we will rectify or update any incorrect or inaccurate Personal Information about you.
e) Erasure ('right to be forgotten') - you have the right to have your Personal Information 'erased' in certain specified situations.
f) Restriction of processing – you have the right in certain specified situations to require us to stop processing your Personal Information and to only store such Personal Information.
g) Object to processing – You have the right to object to specific types of processing of your Personal
Information, such as, where we are processing your Personal Information for the purposes of direct marketing.
h) Prevent automated decision-taking – in certain circumstances, you have the right not to be subject to
decisions being taken solely on the basis of automated processing.
5. ENFORCING YOUR RIGHTS
If you wish to enforce any of your rights then please contact us on our details in clause 8 below.
We will respond to your request without undue delay and no later than 30 days from receipt of any such request,
unless a longer period is permitted by applicable General Data Protection Regulations.
If you are concerned that we have not complied with your legal rights under applicable General Data Protection
Regulations, you may contact the Information (Commissioner's Office https://ico.org.uk) which is the data
protection regulator in the UK where we are located. Alternatively, if you are based outside the UK, you
contact your local data protection supervisory authority.
7. CHANGES TO THIS DATA PROTECTION POLICY
We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent. We will provide this notice by email or by posting a notice of the changes on our website.
8. CONTACT US / FURTHER INFORMATION
8.1 Our Details
This website is owned and operated by ISKCON Scotland Ltd
Resgistered Charity number SC001127.
If you have any queries at all in relation to your data and how we protect your data rights, please contact our
Data Protection Officer on firstname.lastname@example.org
Other Ways of Contacting us
a) using our Website contact form.
b) by telephone on +447726688778
Last updated 14/01/2019