Adderbury Deddington & District Photographic Society
Data Protection Policy
In this document we have abbreviated our name to; ADD
Data Controller
This is the Membership Secretary. A data controller is an individual or organisation which decides how your personal data will be used. The data controller is referred to as “we”, “us” and “our” in this Privacy Notice.
Privacy Notices and our obligations under Data Protection Laws
Applicable Data Protection laws, (including the General Data Protection Regulation 2016 and the Data Protection Act 2018), impose obligations on us as the data controller, when we collect or create, hold, amend, disclose, share or otherwise use or erase/destroy (collectively referred to as processing) your personal data and give you, as the data subject, rights over your personal data.
One such obligation is to process, (e.g. collect, hold, use or erase) your personal data fairly, lawfully and in a transparent manner. Our Privacy Policy meets that obligation by explaining what personal data we will hold about you, how we will process your personal data, why we process your personal data, the lawful grounds on which we are processing it and how long we hold your personal data for. It also sets out some of your legal rights.
ADD Privacy Policy
ADD hold only your name, postal address, phone number and email address. We will not release your details to any third parties.
We would like to contact you, via your email address, about the societys activities and other photography related events and activities from third parties. We would also wish to share your name and email address with other members of ADD, via a list of members. In these communications we will use Bcc. We will only do this with your approval.
We will not retain any data relating to a person when they leave ADD.
Use of our website
We don’t collect personal data from people browsing our website. When someone browses our website we only collect standard internet log information. We do not use cookies.
We don’t make any attempt to find out the identities of those browsing our website. We will not associate any data gathered from people browsing this website with any personally identifying information from any source.
The only contacts we provide on the web site use alias email addresses.
Your legal rights
You have a number of rights over your personal data processed by us. These include your rights to request:
- Access to your personal data. You may request a copy of the personal data that we hold about you.
- Accuracy of your personal data. You may request that we correct incomplete, inaccurate or outdated personal data. We take sensible steps to make sure that personal data is accurate, complete, and current. You can help us do this by notifying us of any changes to your personal data.
- Transmission of personal data. You may request that we transfer personal data you have provided to us to you or to another person.
- Erasure of personal data. You may request that we delete your personal data.
- That the processing of your personal data be restricted. You may request that our use of your personal data ends, is restricted or limited.If you require any further information about how we handle your personal data, or wish to make a request to exercise any of your rights under applicable Data Protection Laws, please contact our Data Controller.
- The extent of these rights are limited by law and we may not act on part or all of your request(s) where the right(s) are not applicable. If we don’t act on your request we will explain our reasons for not doing so when responding to your request.
How to complain
If you’re unhappy with the outcome of any of your requests to exercise your rights, or how we handle your personal data then please let us know.
You are also entitled to complain to the Information Commissioner’s Office:
Post
Write to them at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Email
Send a message to Casework@ico.org.uk.
Telephone
Call them on 0303 123 1113.