Identity and contact details of the controller (and where applicable, the controller’s representative) and the data protection officer (DPO)
|
Jo Evans (IHBC Secretary) (ex officio controller); Lydia Porter (representative). The IHBC does not carry out functions on a large enough scale to require a DPO. Contact for all is via admin@ihbc.org.uk.
|
Purpose of the processing and the lawful basis for the processing
|
Membership support and sector advocacy and understanding, as detailed in the LIA
|
The legitimate interests of the controller or third party, where applicable
|
Membership support and sector advocacy and understanding, as detailed in the LIA
|
Categories of personal data
|
General data could include - name, address, personal contact details, photo etc.
Sensitive data could include - date of birth, bank details, employment and personal information
Special data could include - racial or ethnic origin, disabilities, organisational membership, physical health etc.
|
Any recipient or categories of recipients of the personal data
|
- Relevant Branches (contact details only)
- IHBC Enterprises
- Cathedral Communications, which delivers free publications relevant to the sector (contact details only)
|
Details of transfers to third country and safeguards
|
Membership database hosting takes place in the UK.
|
Retention period or criteria used to determine the retention period
|
Retention periods for core membership services and management data are for the duration of membership, with duration of relevant professional data determined for professional purposes through the LIA, with opt outs available.
|
The existence of each of data subject’s rights
|
Full information access and opt-outs offered on request, including opt outs on historic information offered on request in line with the privacy statement and LIA.
|
The right to withdraw consent at any time, where relevant
|
Withdrawal of consent is available on request at any time with opt outs on historic information offered on request in line with the privacy statement and LIA.
|
The right to lodge a complaint with a supervisory authority
|
Complainants have the right to lodge a complaint with a supervisory authority, and/or to submit a complaint to the IHBC Secretary
(ihbcsecretary@ihbc.org.uk)
|
The source the personal data originates from and whether it came from publicly accessible sources
|
Data originates from service users.
|
Whether the provision of personal data is part of a statutory or contractual requirement or obligation and possible consequences of failing to provide the personal data
|
The provision of personal data is not necessarily part of a statutory or formal contractual requirement though subscribing to membership and related events does raise an obligation for the IHBC to provide services, including advocacy, in support of conservation, while failing to provide some core personal data may limit or preclude some support, benefits, services.
|
The existence of automated decision making, including profiling and information about how decisions are made, the significance and the consequences
|
The is no automated decision making, including profiling and information about how decisions are made, the significance and the consequences.
|
When should information be provided?
|
This information is provided on request within timescales considered reasonable for a small charity.
|