CEMVO Data Protection and Privacy Notice – Contact list
Purposes of the processing
CEMVO Scotland needs public engagement to inform and promote their work. They maintain a contact list in order to get in touch with people to inform them about organisational activities. This contact may notify people when CEMVO delivers a new programme, organise an engagement, training or awareness raising event, publishes a report, or other activities such as surveys and CEMVO EM Impact Awards Dinner.
Categories of information
CEMVO Scotland will process “standard” personal information in relation to its contact list. This will include a name, organisation (if applicable), email address and phone number. It may also include a home or work address if contact has been made by mail.
The legal basis for processing
Data protection law states that we must have a legal basis for handling personal data. The legal basis for collecting and holding your personal data for CEMVO contact list is that you have given consent in the past for us to process your personal data for the purpose highlighted in (1) above, Article 6(1) GDPR. However, you are able to unsubscribe from the contact list at any point from which point we will cease to process your personal data (see (5) below, under ‘Data Processing and the Retention of personal data’).
Your data will not be shared with a Third Party, except under a statutory obligation such as crime where CEMVO will have to consider its legal and statutory obligation to divulge personal data to a Third Party such as the Police.
Data processing and the retention of personal data
Contact details will be stored on secure CEMVO servers and will only be able to be accessed by CEMVO staff. People have the opportunity to unsubscribe at any time by contacting CEMVO Scotland. All contact details will then be deleted from the system and you should no longer receive updates from CEMVO Scotland.
Data will be reviewed on an annual basis to ensure it is accurate and up to date. As part of the updating process, CEMVO may get in touch to notify people on the contact list if this is happening and let them know that they have the option to unsubscribe at that point if they choose.
If there are repeated bounce backs from an email address CEMVO staff will remove the contact from the list.
The GDPR sets out the rights which individuals have in relation to personal information held about them by data controllers. These rights are listed below, although whether you will be able to exercise each of these rights in a particular case may depend on the purpose for which the data controller is processing the data and the legal basis upon which the processing takes place.
Access to your information – You have the right to request a copy of the personal information about you that we hold.
Correcting your information – We want to make sure that your personal information is accurate, complete and up to date and you may ask us to correct any personal information about you that you believe does not meet these standards.
Deletion of your information – You have the right to ask us to delete personal information about you where:
- You consider that we no longer require the information for the purposes for which it was obtained
- You have objected to our use of your personal information – see Objecting to how we may use your information below
- Our use of your personal information is contrary to law
Objecting to how we may use your information –Where we use your personal information to perform tasks carried out in (1) above then, if you ask us to, we will stop using that personal information.
Restricting how we may use your information – In some cases, you may ask us to restrict how we use your personal data, such as only receiving information about our new programmes or events. If you ask us to, then we will only use your personal information for agreed purposes / processes.
Changes to our Data Protection Policy and Privacy Notice
We keep this Data Protection Policy and Privacy Notice under regular review and will place any updates on this website. Paper copies of the Data Protection and Privacy Notice may also be obtained by contacting CEMVO Scotland.
Please contact us if you have any queries about our Data Protection and Privacy Notice or to exercise any of your rights:
Shaista Asghar – Head of Operations and Resources
Tel: 0141 248 4830
This Data Protection and Privacy Notice was last updated on 25th May 2018.