Your personal data
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the UK Data Protection Act 2018 and the UK GDPR (General Data Protection Regulation).
Who we are
Telford Tree of Light is the data controller. This means it decides how your personal data is processed and for what purposes.
Our registered address is:
Telford Tree of Light
Our website address is: https://www.telfordtreeoflight.org.uk
What personal data we collect and why we collect it
Commemoration Application Form
When visitors apply for the names of loved ones to be displayed on the Telford Tree of Light, we collect only the data shown in the application form. No additional information such as the visitor’s IP address or browser user agent string is collected.
We use the personal data collected only for the following purposes:
- to be able to contact applicants in the event of any queries
- to reconcile donations made via PayPal with applications
- to support Gift Aid claims for eligible donations
Visitors are required to complete a checkbox giving consent to collect and store the personal data provided in the application form.
All collection and processing of personal data for donations made by PayPal is carried out by the PayPal web site that our web site invokes to effect payments. No personal data is collected by our web site in this respect.
The web site contact form collects the visitor’s name and e-mail address in order to respond to the submitted enquiry.
Visitors are required to complete a check box giving consent to store this personal data in order to provide a response to the enquiry.
How we process your personal data
Telford Tree of Light complies with its obligations under UK DPA 2018 and UK GDPR by keeping personal data up to date, by storing and destroying it securely, by not collecting or retaining excessive amounts of data, by protecting personal data from loss, misuse, unauthorised access and disclosure, and by ensuring that appropriate technical measures are in place to protect personal data.
Who we share your data with
Your personal data will be treated as strictly confidential and will only be shared with members within the Telford Tree of Light committee.
How long we retain your data
Your personal data relating to the commemoration application form will be kept either for 2 months from the application date, or, if you elect to gift aid your donation, for 6 years after the end of the related accounting period, as required by UK tax regulations.
Personal data relating to contact enquires will be kept for a period of 1 month from the date of enquiry.
Your rights and your personal data
Unless subject to an exemption under the UK DPA 2018 and UK GDPR, you have the following rights with respect to your personal data:
- The right to be informed – all organisations must be completely transparent in how they are using personal data (personal data may include data such as a work email and work mobile if they are specific to an individual).
- The right of access – you have the right to know exactly what information is held about them and how it is processed.
- The right of rectification – you are entitled to have personal data rectified if it is inaccurate or incomplete.
- The right to erasure – also known as ‘the right to be forgotten’, you have the right to have your personal data deleted or removed without the need for a specific reason as to why they wish to discontinue.
- The right to restrict processing – you have to right to block or suppress processing of your personal data.
- The right to data portability – you have the right to retrieve and reuse your personal data for your own purpose.
- The right to object – in certain circumstances, you are entitled to object to your personal data being used. This includes, if a company uses personal data for the purpose of direct marketing, scientific and historical research, or for the performance of a task in the public interest.
- Rights of automated decision making and profiling – the GDPR has put in place safeguards to protect individuals against the risk that a potentially damaging decision is made without human intervention. For example, you can choose not to be the subject of a decision where the consequence has a legal bearing on them, or is based on automated processing.
If you would like further advice or information on your rights or wish to exercise them, please write to:
Telford Tree of Light
or send an e-mail to email@example.com
If you are not happy with our response, or you believe that your data protection or privacy rights have been infringed, you can complain to the UK Information Commissioner’s Office, which regulates and enforces data protection law in the UK. Details of how to do this are available at the Information Commissioner’s Office website.