Buckingham Camera Club
Last updated 25 May 2018
Who we are
At Buckingham Camera Club we are a supportive and friendly group, with a common interest in photography. We range from young enthusiastic beginners to people that can share their knowledge to encourage and develop your skills with your camera and/or photography.
Buckingham Camera Club is the Data Controller for the purposes of Data Protection law.
Personal data is any information that can be used to identify you. It can include name, address, phone number, email address and IP address. The processing of personal data by organisations is governed by the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). We take your privacy seriously and we will only use the information we collect about you lawfully. This Privacy Notice sets out how we use your personal data.
What information we collect and how we collect it
We will collect personal data from you directly when you join the club.
We sometimes collect data from other independent organisations. These organisations should only share your details with us when you have given them permission to do so. You should check their Privacy Notice when you provide your information to them, to ensure you fully understand what they will do with your personal data.
We may receive personal information about you when you visit our website.
As a general rule, we don’t ask for or keep sensitive data about you (e.g. health/medical information, date of birth, bank account details, political or religious beliefs, etc).
What do we use your data for?
We use your information to send you updates about the Club’s programme of events.
We may send you information about events that we believe will interest you.
We may use your information for administration purposes.
How do we process your data?
We store your information both in paper form and electronically. In electronic form, they are typically held in spreadsheets or on our website. In paper form, your information is held by the committee members.
Where your information is held electronically, it is password protected.
The lawful bases of our processing
Data protection law sets out a number of reasons, or lawful bases, for which organisations may collect and process personal data. The law allows for six different lawful bases in total but only three are relevant to the type of activities undertaken by Buckingham Camera Club.
1. Personal data is processed in line with a Contractual relationship.
2. Personal data is processed on the basis of it being in the Legitimate Interests of Buckingham Camera Club.
3. Personal data is processed on the basis of an individual’s Consent.
Your rights in relation to the personal information we hold about you
Data protection law gives you certain rights over the personal data held by organisations.
1. Right to be informed. You have the right to be told how your personal information will be used. This Privacy Notice and shorter summary statements used in our communications provide you with information regarding the type of personal data we collect, how we collect it and how we use it. If you would like further information please email [email protected]
2. Right of access. You may contact us to ask what personal information we are holding about you and to request a copy of that information. You must provide proof of your identity by sending us two pieces of approved identification. We have 30 days to comply with your request once we are satisfied that you have the right to see the requested records and have successfully confirmed your identity.
3. Right of rectification. You may ask us to correct any personal data where it is incomplete, incorrect or where it is out of date.
4. Right of erasure. You may request that we delete the information we hold about you. If there is no overriding legal reason why we cannot do that (if for example, you are in a legal dispute with the Club) we will delete your record. We may suggest keeping basic details for a suppression list, to prevent us from contacting you again, rather than complete deletion.
5. Right to restrict processing. In some situations, you have the right to ask for the processing of your personal data to be restricted, perhaps because you disagree with its accuracy or legitimate usage. We will still hold the data, but will not use it, until the restriction is lifted following the resolution of the disagreement.
6. Right to data portability. This right is mainly applicable to service providers, so that people may move from one service to another and so has limited application to Buckingham Camera Club. The exception is the information held about you (and that you have provided) on the Club’s website.
7. Right to object. You may object to the processing of your information where it is held on the basis of our Legitimate Interests i.e. lists of judges.
8. Right to automated decision making. Buckingham Camera Club does not process information in any way that would allow this right, therefore this does not apply to personal data held by us.
Who do we share your information with?
We will not share your data with anyone outside the Club Committee and Co-opted Members, except when required by Law, or except with our Insurance Company in the event of an insurance claim.
We will always hide your email address when sending communications to groups of, or all, members.
We never sell or otherwise provide your personal data to any other third party organisations.
Retention period for your personal data
The law requires that we keep your personal data for no longer than necessary. The length of time each category of data is held by us varies according to the purpose for which it was collected.
Your personal information is removed from our systems in line with our retention policy.
The security of your data
Personal data in our databases and on our systems is only accessible by Committee members and Co-opted Committee members who need to access your personal data as an essential part of their role.
To provide better protection to users of our website we have implemented a number of technologies that further enhance and harden the security. These can be broken down into three main areas:
1. SSL (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral.
2. Security enhancements have been deployed to detect website security hacks and protect against these.
3. Password Protected Membership Area
What is a cookie and how is it used on our website?
Embedded content from other websites
We are committed to protecting the privacy of the young people who engage with us through our website and at club events. If you are a child under the age of 18 we request your age and you must obtain parental or guardian permission before joining the Club.
If you are under the age of 18, a membership application form must be completed by your parent or guardian. During the application process, certain personal information will be requested. This information will be processed by us under the lawful basis of a Contractual relationship (see ‘The lawful bases of our processing’ above). If you’re under the age of 16, all Club related correspondence is made with the person that gave permission and there is no communication made directly to you.
If you’re aged between 16 and 18 we may contact you if your parent or guardian has provided your email or mobile number.
In the first instance please talk to us so that we can try and resolve the problem. If you wish to complain about the way we collect, store or use your personal data, please contact us at: [email protected]
Changes to this Privacy Notice
We review and improve our procedures regularly and may update this Privacy Notice from time to time. We encourage you to check this page for any changes in order for you to stay informed about how we are protecting the personal information you have entrusted to us. If there are significant changes in the way we process your personal information, we will contact you as well as placing a prominent notice on our website.