This Policy describes the information we collect from you, how we use that information and our legal basis for doing so. It also covers whether and how that information may be shared and your rights and choices regarding the information you provide to us.
We may update this Policy from time to time. If we do, we’ll let you know about any material changes, either by notifying you on the website or by sending you an email.
Runnymede Trust is the data controller of your personal data and is subject to the Data Protection Act 1998 (DPA) and any related or successor legislation, including the Privacy and Electronic Communications Regulations 2003 and, from 25 May 2018, EU Regulation 2016/679 (the GDPR) and the UK Data Protection Act 2018.
In order for us to provide you the best possible service, we need to collect and process certain information. Depending on your interaction with us, that may include:
1. Legitimate interests
We may process your personal data because it is necessary for our or a third party's legitimate interests. This will always be weighed against your rights, interests and expectations. Examples of where we process personal data in accordance with our legitimate interests include:
In this respect, we may also provide your personal data to the following (where this is necessary for our or a third party's legitimate interests):
2. Legal obligations
We may also process your personal data for our compliance with our legal obligations. In this respect, we may use your personal data to comply with subject access requests of others, tax legislation, safeguarding requirements (for example those required by the Charity Commission), for the prevention and detection of crime, and in order to assist the police and other competent authorities with investigations (including criminal investigations). In this respect, we may provide your personal data to our professional advisers, where this is necessary for us to obtain their advice or assistance.
In some circumstances wet may seek your specific consent to process your personal data: for example, if we wish to use your name, likeness or an attributed quote on our website or in marketing materials.
If you have given your consent and you wish to withdraw it, please contact us using the contact details below. Please note that where our processing of your personal data relies on your consent and you then withdraw that consent, we may not be able to provide some aspects of our charitable services to you. Equally, where our processing of your personal data does not rely on your consent, we may not be able to fulfil your request
We will retain your information as long as necessary to provide you with the services or as otherwise set forth in this Policy. We will also retain and use this information as necessary for the purposes set out in this Policy and to the extent necessary to comply with our legal obligations, resolve disputes, enforce our agreements and protect our legal rights.
We also collect and maintain aggregated, anonymized or pseudonymized information which we may retain indefinitely to protect the safety and security of our Site, improve our Services or comply with legal obligations.
You have the right to be informed of Personal Data processed by us, a right to rectification/correction, erasure and restriction of processing. You also have the right to ask from us a structured, common and machine-readable format of Personal Data you provided to us.
We can only identify you via your email address and we can only adhere to your request and provide information if we have Personal Data about you through you having made contact with us directly and/or you using our site and/or service. We cannot provide, rectify or delete any data that we store on behalf of our users or customers.
In addition, you have the right to lodge a complaint with the data protection authority in your jurisdiction.
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply: for example if we have reason to believe the personal data we hold is accurate or we can show our processing is necessary for a lawful purpose set out in this Privacy Notice.
You can find out more about your rights under data protection legislation at www.ico.org.uk.