A generic Privacy Notice, explaining GDPR and its implications, has been created as follows.
From 25th May 2018, Slow The Flow Calderdale will be complying with the General Data Protection Regulation to ensure that the personal data you have supplied us with remains secure and is handled properly.
As technology develops and data sharing becomes more common, data protection is becoming more and more important. That’s why new legislation known as GDPR (General Data Protection Regulation) is being enforced on the 25th May. This will replace the existing Data Protection Act.
We want to ensure that you are fully aware of the changes that GDPR will bring, and to update you regarding how Slow The Flow Calderdale will use any data you provide us with.
What is GDPR and why do we need it?
There are two key reasons why GDPR is being introduced – to bring all EU member states under one common regulation, and to update regulations to reflect our new digital age.
In the UK, companies are still following the 1998 Data Protection Act to ensure the safety of people’s data. But technology and data sharing has developed a lot since 1998. This means that the current regulation may not be entirely suitable for the needs of consumers and the types of technology we’re seeing today. GDPR will replace the Data Protection Act to better protect our data from breaches and hacks.
What data does it protect?
GDPR aims to protect any personal data a company holds about you – including your name, address, email address and images.
How will it affect UK businesses?
Essentially, GDPR will affect everyone in all 28 EU member states, from businesses big and small, to customers and consumers. It will still apply after Brexit.
When it comes to implementing GDPR, the biggest changes will be seen by businesses rather than consumers, since they’re the ones who will have to adjust the way they handle data to align with the new legislation.
How will GDPR affect me?
While businesses will have to make changes to their data policies in preparation for the new regulations, consumers don’t have to do anything in particular to prepare.
However, GDPR also gives you a number of ‘rights’ when it comes to your data, including:
The right to be informed – you have a right to know how your data will be used by a company.
The right to access your personal data – you can ask any company to share with you the data they have about you!
The right to rectification – this just means you can update your data if it’s inaccurate or if something is missing.
The right to erasure – this means that you have the right to request that a company deletes any personal data they have about you. There are some exceptions, for example, some information can be held by employers and ex-employers for legal reasons.
The right to restrict processing – if you think there’s something wrong with the data being held about you, or you aren’t sure a company is complying to rules, you can restrict any further use of your data until the problem is resolved.
The right to data portability – this means that if you ask, companies will have to share your data with you in a way that can be read digitally – such as a pdf.
The right to object – you can object to the ways your data is being used. This should make it easier to avoid unwanted marketing communications and spam from third parties.
Consent – Sometimes we need your consent to use your personal information (for example, to send you e mails about Slow The Flow Calderdale developments and events). We won’t always need consent to use personal information – for example if we need it to meet regulatory requirements or perform a contract with you such as becoming a member. Where you have given consent, you have the right to withdraw at any time.
You have the right to object to how we process your personal information. You also have the right to access, correct, sometimes delete and restrict the personal information we use. In addition, you have a right to complain to us and to the data protection regulator.
If you have any queries on GDPR and how data will be handled, please don’t hesitate to contact us by e-mail at firstname.lastname@example.org