ROYAL THAMES YACHT
CHARITABLE TRUST
DATA PRIVACY POLICY
Royal Thames Yacht Club Charitable
Trust (“the Trust”) is a registered charity No 1108385. The Trust stores a limited amount of personal
data, usually as Controller of the data but sometimes as a Processor of the
data and is committed to complying with all current Data Protection legislation
applicable to the UK. The Trust has 4 Trustees who are responsible for the
direction and governance of the Trust, the raising and distribution of funds
and where possible avoids storing sensitive personal data.
The Trust collects, processes
and holds personal data for the following
purposes:
1. Personal data of Royal
Thames Yacht Club Members (“the Club”) provided by the Club for the purpose of collecting
funds. The Trust uses this data to write to Members for the purposes of fund
raising. The data provided is processed singularly for the creation of the
mailing and is one-time use. At the discretion of the Trustees it may be
decided to connect with permissioned persons other than Members of the Club in
which case the same conditions of engagement would apply.
Club Membership data is not stored
or shared with any third party or used for any other purposes.
2. Personal data of Members of
the Club who contribute (“Contributors”) to the Trust. Contact details are
collected for the purposes of write letters of thanks and where contributions
are recurring to record such frequency and means by which sums are to be
collected.
Storing the above data is
handled securely by the Chairman of the Trust who regularly, at least annually
reviews the data deleting none- active Contributors. Contributor data is not
shared with any third party or used for any other purposes.
3. Personal data of the
Trustees and third parties who are proposing candidates to benefit from the
Trust and organisations providing services to the Trust for the purpose of
managing the business and manage the responsibilities of the Trust.
Storing the above data is
handled securely by the Chairman of the Trust who regularly, at least annually
reviews the data deleting retiring Trustees and none- active third party organisations
. Trustee and third party organisation data is not shared with any third party
or used for any other purposes.
4. Sensitive
personal data of candidates benefiting from the Trust is not collected. The
Trust operates an agreed application for funds process which enables individual
candidates’ applications to be reviewed including candidate circumstance but
does not contain personal data. In the event any personal data is mistakenly
revealed it is deleted.
The
lawful
basis for processing data under 1 is the positive consent of Royal Thames
Yacht Club Members data provided.
The
lawful
basis for processing data under 2 is for the necessary pursuit of the Trust’s
legitimate interests and in performing its duties and responsibilities.
The
lawful
basis for processing data under 3 is for the performance of the agreements
with approved third party organisations.
Data
storage and Security: The
Trust has implemented generally accepted standards of technological and
operational security in order to protect personal data. Computerised data is
securely hosted on contracted servers within the EU. Other records are kept
securely by the Chairman of the Trust.
The Trust will
inform data subjects promptly in the event of any breach of their personal data
which might expose them to serious risk.
All data
subjects have the
Rights to access the data concerning themselves, to
require rectification if incorrect.
Any enquiries,
issues or concerns in connection with Data Protection matters should be raised
in the first instance with the Chairman of the Trust (tel: 0207 201 6261, email
[email protected] ). Further complaints may be made to the
Information Commissioner ( www.ico.org.uk/concerns ) .
19th
November 2019
j/pau/mike/RTYC/CharitableTrust/PrivacyStatement/Draft1.0