The Pewterspear Green Trust is committed to ensuring personal data is dealt with in line with the General Data Protection Regulations (GDPR). We will never sell, rent or swap your information to third parties.
We will not share your information without your permission unless required to do so by law
You have a right to query the information we hold. If you wish to exercise this right please contact the Trust by email on firstname.lastname@example.org
How we collect information
- The information we hold on you will only have been given to us by you and will be used for our work in line with the legitimate interest basis of GDPR.
- Via CCTV on the PGT Pavilion for the purpose of crime prevention and health & safety.
How we use this information
For legitimate business of the Trust and management of the Trust's estate.
- Where the Trust has a legal obligation to disclose the information.
Types of personal information we hold which you have provided include:
- Name, address, telephone number, mobile phone number, email address.
- CCTV images.
- Bank details are only used to comply with your instructions for settling invoices.
Using your personal information
- For the purposes of our legitimate business to enable us to carry out our charitable activities and for the management of the Trust’s estate.
- To reply to enquiries and to comply with any legal requirements.
How long we will keep your information
- We will delete your information if you have not been in contact for 5 years.
- Where there are legal and regulatory requirements (e.g. accounting) we will comply with those requirements.
- Where it enables us to carry out our charitable obligations and estate management.
- Where we deem it necessary to archive data for the purpose of documenting how the trust has met its charitable objectives we may keep some data indefinitely.
- CCTV is deleted on a rolling basis, approximately every 56 days.
How we protect your information
- Our electronic information is password protected.
- Paper storage is kept under lock and key.
- We will delete material which is no longer needed for our legitimate business.
Legal basis to process your personal data
The law allows for personal data to be legally collected and used if it is necessary for a legitimate interest of the organisation – as long as it is fair and balanced and does not unduly impact the rights of individuals. We have assessed the trust's interests in carrying out our obligations and we have considered the impact that the collection and use of personal data could potentially have on individuals’ rights. We have concluded that the most appropriate lawful ground for the processing of your personal data is our legitimate interest.
You have the right to:
- Change your mind.
- Ask us to stop using and delete your information for any aspect of our legitimate business.
- Ask to see it, for us to delete it, part of it, correct it, or restrict use of it.
You can complain In the first instance by contacting email@example.com
You can complain to the Information Commissioners Office if you think that there is a problem in how we have handled your information.