PRIVACY POLICY
This Privacy Policy applies to information we the David Williamson Trust collect about individuals who interact with our organisation. It explains what personal information we collect and how we use it. We are committed to using your data fairly and lawfully in line with your data protection rights as set out by General Data Protection Regulation (GDPR).
How we collect your personal data
We primarily collect your data from applications for funding and any subsequent relationship.
If you give information on behalf of someone else, you must ensure that you have their permission to do so and that they have been provided with this Privacy Policy before doing so.
Information we may collect and hold
The only personal information we collect will be the relevant contact details (name, phone number, email address).
How personal information is used
Use of personal information under the data protection laws must be justified under one of the following legal grounds:
- Where consent has been given
- If necessary to fulfil a contract
- To comply with legal obligations
- Where there is a vital interest and it is deemed necessary to protect someone’s life
- In order to fulfil the public interest
- If the processing is necessary for our legitimate interests or the legitimate interests of a third party; unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests
The lawful basis on which we shall be processing personal information is legitimate interests it being necessary for us to do so in order to maintain our relationship with you, consider and deal with the provision provide of grant funding and maintain our own records.
How data is kept safe
Personal information is stored electronically.
All trustees are aware of data protection regulations and are committed to keeping any personal information they hold secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the personal information.
Any personal data breaches will be reported to the necessary supervisory authority in line with regulation.
How long personal information is held
We will hold your information for as long as is necessary for the purpose for which is obtained.
Any data held will be periodically reviewed to ensure it is still appropriate to hold it.
Who we share personal information with
Personal information is only shared among Trustees where necessary to carry out our duties except if we are required by law to share your data.
Contacting us & Your Rights
Unless subject to an exemption under the GDPR, you have the right to:
- Be informed about the collection and use of your personal data
- Access any information we hold about you
- Correct any information we hold about you
- Erase any information we hold about you, if it is deemed no longer necessary for us to hold it
- Request the restriction of use of your data
- Object to us processing your personal data
A full summary of your legal rights over your data can be found on the Information Commissioner’s website here: https://ico.org.uk/
If you have any queries in relation to your personal data, please contact us at: enquiries@davidwilliamsontrust.org.uk
If you are dissatisfied with our use of your information or our response to any exercise of these rights, you have the right to complain to the Information Commissioner’s Office. You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.
Data Controller
The Trustees of David Williamson Trust as a body is the data controller (contact details above). This means it decides how your personal data is processed and for what purposes.
Any changes to this Policy
David Williamson Trust may change this policy from time to time by updating this page. You should check this page periodically to satisfy yourself as to any changes. This policy is effective from May 2018.