Under the General Data Protection Regulation (GDPR) 2018 and the Data Protection Act 1998, you have a right to be informed about the collection and use of your personal data. This notice sets out your rights and provides you with the information that you need to exercise those rights.
We will regularly review and where necessary update your data privacy information. If we start to use your information for a new purpose which you are/were not aware of, we will bring this to your attention before we begin processing it.
We will provide the information in a way that is concise, transparent, intelligible, easily accessible and uses clear and plain language.
The lawful basis for processing your personal data
As a service user at Cranhill Development Trust, we need to keep and process information about you to keep you informed about CDT services. The information that we hold and process will be used for our management and administration use only. We will keep and use it to enable us to run the Trust and manage our relationship with you effectively, lawfully and appropriately, during the time you spend working with the Trust. This includes using information to enable us to comply with the relevant placement agreements, to comply with any legal requirements, pursue the legitimate interests of the Trust (for example to prevent fraud, for administrative purposes or to report potential crimes) and protect our legal position in the event of legal proceedings.
Purpose of processing your personal data
Much of the information that we hold will have been provided by you, but some may come from other external sources such as the Department of Work and Pensions.
The sort of information we hold includes your CDT registration form, possible volunteer application forms, educational/job application forms, personal information about you personally (address etc.), ICO and standard agencies.
Where we process special categories of sensitive personal data relating to your ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, biometric data or sexual orientation, we will always obtain your explicit consent to those activities unless this is not required by law or the information is needed to protect your health in an emergency.
Where we are processing data based on your consent, you have the right to withdraw that consent at any time.
Retention periods for your personal data
We will keep your records for 6 years:
- Full name
- Telephone number and email address
- Reference preferences information
- Details about your skill set
Who your information will be shared with
Data will be shared with the following agencies:
- Educational Establishments
- Scottish and UK awarding bodies
- Jobs and Business Glasgow
- Glasgow North East Foodbank
- Funding bodies
Other than for the purposes outlined above, we will only disclose information about you to third parties if we are legally obliged to do so or where we need to comply with our contractual duties to you.
Your rights in relation to the processing of your personal information
Under the General Data Protection Regulation (GDPR) and the Data Protection Act (DPA) 2018, you have a number of rights with regard to your personal data. You have the right to request from us access to and rectification or erasure of your personal data; the right to restrict processing or to object to processing; and (in some circumstances) the right to data portability.
If you have provided consent for the processing of your data, you have the right (in certain circumstances) to withdraw that consent at any time, which will not affect the lawfulness of the processing before your consent is withdrawn.
You have the right to make a complaint to the Information Commissioners Office if you believe that we have not complied with the requirements of the GDPR or the DPA.
Cranhill Development Trust operates CCTV in various locations throughout the campus. This is done in accordance with data protection legislation and in line with best practice guidance from the Information Commissioners Office (ICO). Website: www.ico.org.uk
Identity and contact details of the data controller and the data protection officer
Cranhill Development Trust is the controller and processor of data for the purposes of the GDPR and the DPA 2018.
If you have any concerns about how your data is processed, you can contact:
Marie Ward Angela Naismith
CEO Employability & Compliance Lead
Cranhill Development Trust Cranhill Development Trust
109 Bellrock Street 109 Bellrock Street
G33 3HE G33 3HE
T: 0141 774 3344 T: 0141 774 3344
This policy is reviewed annually
Last reviewed: April 2018