This privacy statement explains why and how Durham Community Action collects personal information about individuals and how we use it.
The Data Controller is Durham Community Action, 9 St Stephen’s Court, Low Willington, Co. Durham DL15 0BF.
Why do we need your information?
Durham Community Action (also known as DCA) is an infrastructure organisation providing advice, support and assistance to individuals and frontline groups operating in the Voluntary, Community and Social Enterprise (VCSE) sector and to various communities of interest. We use the personal data we receive to assist us in our work which includes one to one and group support, delivery of training and events and hosting specific projects. Full details of our work can be found at www.durhamcommunityaction.org.uk
Whose data do we collect?
We hold data on those from whom we receive enquiries, those we work with, those who attend our training and/or events, those who register to receive information from us and those who participate in our facilitated programmes.
What type of personal data do we collect?
We may collect the following types of personal data: name, address, email address, telephone number, name of the organisation you work/volunteer for and your role, payment details, dietary or access requirements, and any other contact information. For our facilitated programmes we may also collect sensitive personal data.
How we obtain your data
Most of the data we hold about you has been provided directly to us by you. We also collect data from publicly available sources such as the Charity Commission and Companies House, and for our facilitated programmes we may also obtain data from parties within their agreed procedures.
What we do with your data and why
We will use the information you provide to:
- fulfil your requests for advice and support
- record any contact we have with you
- send communications to you regarding our work
- report to our stakeholders and funders
Processing your data
The lawful bases for processing our data as set out in Article 6 of the GDPR are:
- a) Consent – the individual has given clear consent for us to process their personal data for a specific purpose.
- b) Contract – the processing is necessary for a contract we have with the individual, or because they have asked us to take specific steps before entering into a contract. This applies to our one to one and group support work.
- c) Legitimate interest – processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
We will keep data for as long as is needed to complete the task for which it was collected or to fulfil our funders specific retention criteria. We often develop long term relationships with those we work with and so we expect to keep your data for as long as that relationship exists until we no longer need it, or you have withdrawn your consent and we have no legal obligation to continue to hold it.
Protecting your data
We keep your data secure in our systems which have appropriate security mechanisms in place. Sensitive personal data is treated with extra security.
Our website www.durhamcommunityaction.org.uk does not use cookies. We use Google Analytics to analyse use of the DCA website which collects standard internet login information and details of visitor’s behaviour patterns. We do this to monitor usage of the website and this information is only processed in a way which does not identify anyone.
Disclosure and sharing of personal data
We use computerised records held within our systems in compliance with GDPR. We will only share personal and sensitive personal data where we have a contract with an organisation or funder who stipulate this as a requirement of the contract. Disclosure of certain personal data may also be made to other entities; this will only ever be done in accordance with GDPR and your consent will be sought where necessary.
Your rights
Under the GDPR you have several rights which include:
- The right to be informed
- The right to access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling
DCA strives to ensure that your personal data remains accurate. To assist us with this you should notify us of any changes to information we hold about you.
You may withdraw consent from receiving information from us at any time.
You may request a copy of the data we hold about you. This is known as a ‘Subject Access Request’ (SAR). SAR’s should be made in writing or by email using the contact details at the end of this statement, clearly stating this is a Subject Access Request. There is no charge for this information.
If you are not satisfied with the way we have processed your data, then you can contact the Office of the Information Commissioner https://ico.org.uk/global/contact-us/
Contacting Us
If you have any questions about this privacy statement, about the way in which we process your data or if you wish to change the way we use your data including how we communicate with you, please contact us:
Durham Community Action, 9 St Stephen’s Court, Low Willington, Co. Durham DL15 0BF
Telephone: 01388 742040
