GPDR WP29

Description of processing

The following is a broad description of the way this organisation/data controller processes personal information. To understand how your own personal information is processed you may need to refer to any personal communications you have received, check any privacy notices the organisation has provided or contact the organisation to ask about your personal circumstances.

Reasons/purposes for processing information

We process personal information to enable us to administer membership records.
We process personal information to enable comments and downloads.

Type/classes of information processed

We process information relevant to the above reasons/purposes. This may include:

    personal details
    financial and membership details
    services
    visual images, personal appearance and behaviour

We also process sensitive classes of information that may include:

    physical or mental health details
    racial or ethnic origin.
    suspicious activity or behaviour

We process personal information about:

    members
    consultants and professional experts
    complainants and enquirers

Who the information may be shared with

We sometimes need to share the personal information we process with the individual themself and also with other organisations. Where this is necessary we are required to comply with all aspects of the Data Protection Act (DPA). What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons.

Where necessary or required we share information with:

    members
    police forces
    security organisations
    central and local government
    NHW, business crime reduction partnerships, shopwatches, pubwatches and similar schemes including regional and national schemes
    consultants and professional advisers
    suppliers, providers of goods and services
    people making an enquiry or complaint
    healthcare professionals, social and welfare organisations

 

Transfers

It may sometimes be necessary to transfer personal information overseas. When this is needed information is only shared within the European Economic Area (EEA). Any transfers made will be in full compliance with all aspects of the data protection act and GDPR and PrivacyShield

 
We process the following information as a requirement to being a member.

Your name
Your email address

Under the GDPR; the following rights are detailed.
We transfer data to other members, which may include police forces, and via the internet cloud service to and from servers hosted in the UK, EU  and USA under the privacyshield agreement.

Rights of access:
A member who is registered on our system has the right to be provided with the personal data and information on processing, recipients, data transfers, and subsequent rights (such as the right to complain to a supervisory authority, or the right to request rectification, erasure, or a restriction on future processing).

Right to Rectification
If any change of circumstances occur, it is the members responsibility to ensure they update their details via the profile/members page or via the gdpr contact form .

Right to Erasure (Right to be Forgotten)

Subject to certain conditions, a data subject has the right to request the erasure of his or her personal data held by a data controller, via the gdpr contact form this usually occours at the end of the membership.  

Non members:
 We have the ability under the GDPR to decline an erasure request if it falls within one of the several exclusions in Article 17(3).

Right to Restriction of Processing
Personal Data provided by the member via the profile page may be removed via the member.
People who are confirmed to be listed on the website, and have provided sufficient proof they are listed, and on submission of full identification, may request copies of their data and their requests under their rights under Article 15 must be clearly detailed via the gdpr contact form

Notification Obligation for Controllers
We will notify each member of any event  impacting data rectification, erasure, or restriction. If the data subject requests details on recipients, the data controller is required to supply it.

 Right to Object
 A data subject has the right to object to the processing of his or her personal data at any time where the legal basis is "the performance of a task carried out in the public interest," "the exercise of official authority vested in the controller," or for the purposes of the "legitimate interests" of the controller or a third party (Article 6(e) and (f)).
The data subject can also object to processing for the purposes of direct marketing and profiling for direct marketing activities.

Automated individual decision-making, including profiling.
We do not participate in this activity.

Processor Requirements
We do currently engage 3rd party data processors Google analytics.These are recognised as universal 3rd party processors. We engage google for recaptcha and adverts


Records of Processing Activities
We keep records of applications,
Members logins time and dates (including log out)
Data adjustment requests,
IP addresses used to visit and contact forms.

Security of Processing Data
Our servers are protected by SSL encryption. Our website is members login protected, IP tracked for administrative works. Members can update data without going through the site adminstrator, data controller, or data processors first.

Transfers of Personal Data to Third Countries or International Organizations.
Our servers are based in the EU and USA. Our USA servers are considered to conform to EU-US Privacy Shield.

Data loss prevention.
All data is held on the website under details above.
We do not allow shared logins.

Consent
We recognise the consent requirements. Becoming a member post GDPR will require you to consent to receiving information and your details as the membership requires. You can withdraw consent but that may affect your website use.
Per GDPR date, you may in future be asked to reconfirm your consent, however consent is not retrospective.

cookies18

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first party cookies. We also use third party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts.

Cookies help us to better serve you and improve our services. By continuing, you agree to our use of cookies.

 Cookies collect information about the use of our web site. This information includes the type of Internet browser and operating system that you use, the domain name of the site from which you connect, the date, time and duration of your visit, number of visits, average time that you spend on our web site, and the pages that you view. A cookie also contains a unique identification number that identifies your browser. This helps us recognize your browser when you visit our web site again. We also track what searches people make on our web site, and what browsers, computers and operating systems they use. We may record mouse clicks, mouse movements, scrolling activity as well as text you type in this web site.

Purpose:
Essential cookies

These cookies are essential in order to enable the user to move around the web site and use its features, such as accessing secure areas of the web site.

Performance cookies

These cookies collect information about how visitors use a web site. These cookies do not collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. They are only used to improve how a web site works.

Functionality cookies

These cookies allow the web site to remember choices a user makes (username, language, region) and provide enhanced, more personal features. These cookies are used to remember changes a user makes for parts of the web that are customizable. They are used to facilitate certain features such as watching a video or commenting on a blog.

Targeting cookies

These cookies are used for delivering adverts and to measure the effectiveness of an advertising campaign. For example, they impact what advertisements you see on third party web sites or link to social media network feeds.

Origin:

We use both first-party (set by us) and third-party cookies (set by a domain other than us that convey information to that third party site upon your visit to we site).

Expiration:
Session cookies

Cookies that a created temporarily. A browser session starts when a user opens the browser window and finishes when they close the browser window. Once the browser is closed, these cookies are deleted.
Persistent cookies

Cookies that remain on the user's device for the period of time specified in the cookie. They are activated each time the user visits the web site that created that particular cookie.
Third-party web analytic providers

We also use the following third-party service providers to achieve some of the above collection of data via cookies. In such an event, the collected data is transmitted to such third-party service providers for processing. The collection and processing of data from our sites by such third-party service providers is consistent with this privacy policy.
l.
Google Analytics

You can read more about Google Analytics data collection here: http://www.google.com/intl/en/analytics/learn/privacy.html.

Opt-out

Most Internet browsers automatically accept cookies. You can discontinue the data collection any time by adjusting your browser settings or by opting-out at third-party web analytic providers' pages (see below). When adjusting, do note that some of the features in our web site are dependent on cookies to function.

There are many sites that advise you on cookie settings and how to change them. For example; http://www.aboutcookies.org/.
Opt-out links for third-party providers

If you do not wish to disable tracking cookies overall (from your browser settings), you can use the links below to opt out from certain third-party providers.

Please note that these opt-out mechanisms work by placing a cookie in your browser. Therefore, your browser must be configured to accept cookies for your preference to take effect. If you delete or clear your cookies, or if you change which web browser you are using, you will need to set your preferences again.
We are not responsible for any third-party web sites that you enter through our web site. Our Personal data policy does not cover data collected by any third-party web sites, so you should read the privacy statements of those web sites carefully.

we does not control cookies from third-party web sites. The third parties are responsible for how these cookies work and how the personal data is processed.

The practices on accepting or blocking third-party cookies vary by marketing campaign and are defined by the third party and applicable laws.

 

Below is a list of the cookies we use on our Website. Our Website is scanned with our cookie scanning tool regularly to maintain a list as accurate as possible.

Mandville.uk - random numeric session cookie to track your online status in this site.

Google Analytics gathers information allowing us to understand interactions with our websites and ultimately refine that experience to better serve you.

__utma
__utmz
_gat
_gid
_ga
__utmb
__utmc
__utmv

{fastsocialshare}