A4ID Privacy Notice
June 2019
Overview
As part of a process of strategy development, A4ID is collecting and processing personal data
relating to the respondents of surveys. As a registered charity, and conscious of its legal obligations
under GDPR, A4ID is committed to being transparent about how it collects and
uses that data, and in meeting its data protection obligations.
Information Collected
A4ID collects a limited range of information about you during this survey process, including:
· your full name;
· the organisation you work for;
· your location; and
· your email address.
A4ID will collect this information using this online form. Data will be stored in a range of different places, including on your
application record, in HR management systems and on other IT systems (including
email).
Processing Personal Data
A4ID needs to
process data to review the answers you provide to these survey questions. A4ID may also need to process your data to enter into a contract with
you. In some cases, we need to process data to ensure that we are complying
with its legal obligations. A4ID will ask for
your consent before it keeps your data for this purpose and you are free to
withdraw your consent at any time.
Access to Data
Your
information may be shared internally for the purposes of the strategy development exercise. This includes members of the Senior Team, the Comms Team, the Ops team, and IT
staff if access to the data is necessary for the performance of their roles. A4ID will not
share your data with third parties.
Data Protection
A4ID takes the
security of your data seriously. We have internal policies and controls in
place to ensure that your data is not lost, accidentally destroyed, misused or
disclosed, and is not accessed except by our employees in the proper
performance of their duties.
Data Retention
The organisation will hold your
data on file for 6 (six) months after the end of the strategy process. At the end of that period, or once you
withdraw your consent, your data is deleted or destroyed.
Your rights
As a data
subject, you have a number of rights. You can:
· access and obtain a copy of
your data on request;
· require the organisation to
change incorrect or incomplete data;
· require the organisation to
delete or stop processing your data, for example where the data is no longer
necessary for the purposes of processing; and
· object to the processing of
your data where A4ID is relying on its legitimate interests as the legal ground
for processing.
If you would
like to exercise any of these rights, please contact Andrew MacKay, COO andrew.mackay@a4id.org.
If you believe
that A4ID has not complied with your data protection rights, you can complain
to the Information Commissioner.