Haddenham Arts Centre (HAC) is committed to keeping safe the data which it collects about individuals and organisations with whom it comes into contact. HAC acknowledges its duty to act appropriately to any allegations, reports or suspicions of leaks of personal data. Any personal data collected by HAC will only be used to ensure the smooth operations of the running of the Centre.
This Policy Statement has been drawn up to ensure HAC complies with the latest General Data Protection Regulations (2018).
1. HAC holds two sorts of personal data
a. The data we receive from donors, artists, service providers.
b. The data we collect as part of running HAC: e.g. personal details of Members, volunteers, supporters and Friends.
2. Type of information we hold
a. Your full name and title and date of birth.
b. Postal address, postcode, email address and phone number.
Your information will not be passed onto unauthorised third parties without your explicit consent.
3. How data is managed
We store all data carefully, either in locked cupboards (if on paper) or privately on computers, protected by password holders. Only Directors and/or appropriate members of staff have access to the data, unless individuals have agreed to share their details with other Members or Friends to ensure the smooth running of operations. We will normally keep data for six years after individuals have left.
4. Information held by HAC used to run the company
The Directors will:
a. promote good practice in the storage of personal data.
b. ensure that data is regularly audited, and any unnecessary data is deleted.
c. ensure that if we have a request to delete personal data it is completed in a timely fashion.
d. ensure we get the correct permissions in future.
e. make it is easy for anyone to find out what data we hold.
5. Your rights
If we do hold information about you, you have the right to request:
- a description of it.
- tell you why we are holding it.
- tell you who it could be disclosed to.
- let you have a copy of the information.
Having received this information, you may email the Chair and request:
- Restriction of Use
- Raise an objection to the data being held or processed.
Confirmation of removal will be sent to the recipient requesting removal.