Carshalton Beeches Well Being Group
This document refers to personal data, which is defined as information concerning any living person (a natural person who hereafter will be called the Data Subject) that is not already in the public domain.
The General Data Protection Regulation (GDPR) which is EU wide and far more extensive than its predecessor the Data Protection Act, along with the Privacy and Electronic Communications Regulations (PECR), seek to protect and enhance the rights of EU data subjects. These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data and the unrestricted movement of personal data within the EU and its storage within the EEA.
1 - Who we are
We are the Carshalton Beeches Well Being Group a group of people who are interested in the Wellbeing of the Community
2 - Personal Data
3 - Legitimate interests pursued by Carshalton Beeches Well Being Group
To promote activities and events which enhance the loneliness and solation of residents in the community with all types of health problems indicated for health care.
4 – Consent
Through agreeing to this privacy notice you are consenting to Carshalton Beeches Well Being Group processing your personal data for the purposes outlined. You can withdraw consent at any time by using the postal, email address or telephone number provided at the end of this Privacy Notice.
5 – Disclosure
Carshalton Beeches Well Being Group will keep your personal information safe and secure,
6 - Retention Policy
Carshalton Beeches Well Being Group will only retain information for as long as it is required
7 - Data storage
Carshalton Beeches Well -Being Group only stores information in the UK
8 - Your rights as a data subject
At any point whilst Carshalton Beeches Well Being Group is in possession of, or processing your personal data, all data subjects have the following rights:
•Right of access – you have the right to request a copy of the information that we hold about you.
•Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
•Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
•Right to restriction of processing – where certain conditions apply you have a right to restrict the processing.
•Right of portability – you have the right to have the data we hold about you transferred to another organisation.
•Right to object – you have the right to object to certain types of processing such as direct marketing.
•Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling.
In the event that Carshalton Beeches Well Being Group refuses your request under rights of access, we will provide you with a reason as to why, which you have the right to legally challenge. At your request Carshalton Beeches Well Being Group can confirm what information it holds about you and how it is processed
9 - You can request the following information:
•Identity and the contact details of the person or organisation that has determined how and why to process your data.
•Contact details of the data protection officer, where applicable.
• The purpose of the processing as well as the legal basis for processing.
•The categories of personal data collected, stored and processed.
•Recipient(s) or categories of recipients that the data is/will be disclosed to.
•How long the data will be stored.
•Details of your rights to correct, erasure, restrict or object to such processing.
•Information about your right to withdraw consent at any time.
•How to lodge a complaint with the supervisory authority (ICO).
•Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data.
•The source of personal data if it wasn’t collected directly from you.
•Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing
10 - Complaints regarding your personal data.
In the event that you wish to make a complaint about how your personal data is being processed by Carshalton Beeches Well Being Group you have the right to complain to us. If you do not get a response within 30 days, you can complain to the Information Commissioners Office (ICO).
CONFIDENTIALITY & DATA PROTECTION POLICY
Carshalton Well Being Community Support Group (CBWCG) is bound by the General Data Protection Regulations (2018) and must maintain high standards of confidentiality in all areas of its work. All Committee Members must comply with this Policy and associated Procedure.
In the course of its work, CBWCG has access to a wide variety of information regarding: -
• Committee members
• Its companies, and partner organisations. This information is required to enable CBWCG to carry out its role as a Community Organisation
All individuals have a right to privacy and this policy aims to protect and promote the rights of individuals and CBWCG.
In order to achieve CBWCG aims, it’s objectives with regard to confidentiality, we will ensure:
• Clarity about why personal information is required and obtain the necessary permission to hold such data in line with General Data Protection Regulations 2018.
• The information is relevant, accurate and securely kept.
• The information is only used for the purpose it is collected and not used for any other purpose or passed to other organisations.
• The information is not kept longer than necessary and destroyed when no longer required.
• The information is accessible to the individual to which it relates as specified under the General Data Protection Regulations (2018).
• All Committee Members are aware of and understand the importance of data protection and confidentiality.
CBWCG holds information from the following sources: -
• from the individual about themselves
• from companies about their status and business
• from factual reports on events
• from risk assessments,
This information will be collected, stored, handled, and disclosed in accordance with the General Data Protection Regulations (2018).
This policy should be read in conjunction with the following CBWCG procedures/documents:
• Health & Safety
• Equality & Diversity
• Safeguarding Vulnerable Adults & Children