Donor personal data

Posted on by tjohnd

Retention and use by HRE of donors’ personal data

 

Statement of purpose

  1. Your personal data (ie name, electronic contact details and donation details) are retained for the purpose of maintaining our donor list in connection with the HRE software project. The legitimate interests of History Research Environment Limited (‘HRE’) in supporting the project, as well as ensuring that we can deal with any future legal or tax query relating to HRE, provides the legal basis for the processing of this data.

Details

3.  The controller (the organisation responsible for your personal data) is History Research Environment Ltd, a UK company whose registered address is 71- 75 Shelton Street, London, WC2H 9JQ.

4.  HRE does not knowingly process the personal data of minors, and you should let us know immediately if you are below the age of 16 years.

5.  Your personal data will be held for six years after the date of your last donation to HRE, or longer if necessary following any legal or tax query.

6.  You retain the right of full access to your data, to require HRE to rectify any errors, and to object to any processing that you no longer agree with. All correspondence should be sent by email to info@historyresearchenvironment.org

7.  Your personal data will be retained in confidence by HRE, and will not be used for any purpose other than those stated above. In addition to the board of HRE, personal data may be processed by a limited number of trusted volunteers, including HRE’s mailing list manager and its liaison & donor manager. Such trusted volunteers (who may be located outside the UK/EU, including in the US) have committed to handling all personal data in compliance with the GDPR and the UK Data Protection Act 2018. Personal data may also be held by the providers of HRE’s third-party platforms (which may also be US-based), including MailChimp, and WordPress.com.  HRE’s understanding is that insofar as they store and process personal data on behalf of HRE those third-party providers are GDPR-compliant. You will understand that HRE, as a small non-profit organisation, has to rely on the integrity of its trusted volunteers and on third-party platforms to maintain the security and integrity of your personal data, and risk should be assessed accordingly.

8.  You have the right to lodge a complaint about the manner in which HRE is handling your personal data with the UK supervisory authority, namely the Information Commissioner’s Office (https://ico.org.uk).

7 June 2018