Who we are
Marlow Refugee Action (MRA) is the data controller (contact details below). This means it decides what information is kept; manages how your personal data is processed and for what purposes and is responsible for its accuracy.
MRA is also the data processor of this data. This means that it is MRA who makes use of the information in the execution of their activities. MRA is the sole data processor.
Our website address is: https://marlowrefugeeaction.org.uk.
Your personal data – what is it?
Personal data is any single piece of information or data that relates to an individual, any piece of which, either alone or in conjunction with another piece of information, can uniquely identify that individual. The storing and processing of such personal data is governed by the General Data Protection Regulation (the “GDPR”).
How do we process your personal data?
MRA complies with its obligations under the “GDPR”
- by keeping personal data up to date;
- by storing and destroying it securely;
- by not collecting or retaining excessive amounts of data;
- by protecting personal data from loss, misuse, unauthorised access and disclosure and
- by ensuring that appropriate technical measures are in place to protect personal data.
Your data may be stored and processed, either manually on paper or electronically and this entire document applies to either.
We use your personal data for the following purposes:
- To administer membership records;
- To manage our resources in order to fundraise and promote the interests of the charity;
- To manage our employees and volunteers;
- To maintain our own accounts and records (including the processing of gift aid applications);
- To inform you of news, events and activities that we are running or promoting.
- To comply with any legal requirements placed upon us
NOTE We do not retain or process any information regarding children under the age of 18 years.
What is the legal basis for processing your personal data?
The legal basis upon which we generally store and process your personal information is defined as Legitimate Interest within the GDPR. This means that it is necessary in order to run and operate the Marlow Refugee Action charity. For example:
- Keeping stakeholders informed
Processing is carried out by Marlow Refugee Action or their appointed representatives in full accordance with GDPR.
We only use information supplied to us by you i.e. we do not obtain information from any third party sources.
By supplying us your personal information we deem that we have your explicit consent to use the information to carry out the activities of the Charity; to keep you informed about news, events and activities and to process your gift aid donations;
We do not normally pass your personal information to any third party, save where we are required to do so by law e.g. for the purposes of calculating employee tax due.
NOTE Where Processing is necessary for carrying out legal obligations under employment, social security or social protection law, or a collective agreement, we do not require your express consent.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with other members of Marlow Refugee Action in order to carry out a service in line with our constitution. We will only share your data with third parties with your express consent.
How long do we keep your personal data?
- We will ordinarily retain contact information for up to six years.
- Gift aid declarations and associated paperwork is kept for up to 6 years after the calendar year to which they relate.
- We retain employee information for up to 6 years from the date of leaving our employ (to comply with legal and taxation requirements)
- We retain volunteer information for 1 year after formally ceasing to volunteer for us.
Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
- You have the right to know exactly what personal information Marlow Refugee Action holds about you.
- You have the right to see or request a copy of your personal information which Marlow Refugee Action holds about you;
- You have the right to request that Marlow Refugee Action corrects any personal data if it is found to be inaccurate or out of date;
- You have the right to request that all or part of your personal data is erased where it is no longer necessary for Marlow Refugee Action to retain such data;
- You have the right to withdraw your consent to the processing at any time; this can only apply where the information is not required for legal reasons.
- You have the right to request that your personal information is passed to another data controller
- You have the right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
- You have the right to object to the processing of personal data, (where applicable)
- You have the right to lodge a complaint with the Information Commissioners Office.
If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
To exercise all relevant rights, queries, requests, or complaints please in the first instance contact Julie Purves (firstname.lastname@example.org)