Where multiple retention periods apply to one category of data, the retention period will be the longest one (although we will stop using that category of data when the retention period for that purpose expires).
With regard to the items with a grey background either: (a) you may have the right to object to processing; or (b) you have the right to withdraw your consent. For details on how to exercise either, please see the section below titled “Withdrawing your consent and/or objecting to our processing”.
Withdrawing your consent and/or objecting to our processing
Where we originally relied on consent to process your personal data, you will always have the right to withdraw that consent.
Similarly, where we originally relied on our legitimate interests to process your personal data, you always have a right to object to our processing of that personal data. However, we do not have to stop processing that personal following your objection where we are able to demonstrate either:
- We have compelling legitimate grounds to process that personal data which override your interests, rights and freedoms; or
- We require to data for the establishment, exercise or defence of legal claims.
Your right to object to legitimate interests processing is, however, absolute if it relates to processing for marketing purposes.
We highlight where these rights apply in the table of data processing activities above, and in this paragraph we provide detail of how to go about withdrawing your consent or objecting to our legitimate interest processing.
Withdrawing your consent to direct marketing, or objecting to our legitimate interest processing for direct marketing purposes
Below we set out the easiest way to withdraw your consent to, or opt-out from, marketing communications.
However, you can always contact us by calling us on 02380 579833, emailing us at contact@hendyfoundation.org or writing to us at: Hendy Foundation, School Lane, Chandler’s Ford Industrial Estate, Eastleigh, Hampshire SO53 4DG.
- If we are not yet processing your personal data (i.e. because this is your first contact with us): You can opt out of receiving marketing communications from us by ticking the appropriate box on the form which you complete (whether on our website or via a paper form), or by contacting us at any time using the details set out above.
- If you previously opted-in to marketing or did not opt-out at the time you gave us your details (as the case may be): You can withdraw your consent or opt out by clicking the unsubscribe link which we include on all of our electronic marketing communications, or by contacting us at any time using the details set out above.
Objecting to non-marketing legitimate interests processing
To object to any of our non-marketing processing based upon our legitimate interests (as highlighted in the processing activities table above), please contact us using the contact details at the top of this policy.
Where we obtain your personal data from
We obtain personal data from the following sources:
- You, for instance where you contact us about the charities and causes that we support, or in conjunction with our fundraising activities;
- From other charities or causes who may be working in partnership with you/ us;
- Occasionally from other third parties who may lawfully pass to us information about you, but never for marketing purposes; and
- If you apply for a position with the Foundation.
Persons with whom we may share your data:
In general, access to your personal data will be restricted to those who have a need to access it in order to carry out their duties (for example, our trustees or accountancy team).
However, we will also share your personal data with the following external third parties in some circumstances:
- Regulators and government authorities such as HMRC or the police, if we are required to do so by law or if the regulator or authority requests it and we regard that request as reasonable;
- Fraud prevention agencies or other third parties that assist us in preventing fraud or loss;
- Our insurers, legal advisers or other third parties who need access to it in the context of managing, investigating or defending actual or potential claims or complaints;
- Organisations that process your data on our behalf which are not allowed to use your data for any other purpose (which include, for instance, marketing agencies or data management firms).
Transfers outside of the European Economic Area
In certain limited circumstances, we may export personal data outside of the European Economic Area for processing, and we may use third party service providers who do the same.
We only do that if there is a good reason to do it and where adequate safeguards (such as the appropriate contractual arrangements with suppliers, or adequacy decisions, depending on the destination country) are in place.
Your rights
The law gives you certain rights in respect of the personal data that we hold, which you should be aware of:
- You have the right to obtain your personal data from us except in limited circumstances. Where we provide it, the first copy will be free of charge, but we reserve the right to charge a small fee for additional requests.
- You have the right to require us to rectify any inaccurate personal data we hold concerning you.
- Taking into account the purposes of the processing, you may also have the right to have incomplete personal data completed, by means of providing a supplementary statement or otherwise.
- You have the right to require us to erase your personal data on certain limited grounds (including where they are no longer necessary for the purpose for which they were collected or where you withdraw your consent and there is no other legal ground for the processing).
- Where we process personal data, either on the basis of consent or contractual necessity, you provided the personal data to us, and we process that personal data by automated means, you have the right to require us to give you your data in a commonly used electronic format.
- You have the right to object to our processing of personal data which we process on the grounds of our legitimate interests, although we do not always have to honour your objection. For more information see the section above titled “Withdrawing your consent and/or objecting to our processing”.
- You have the right to require us to restrict the processing of your personal data on certain grounds, including where:
- You contest the accuracy of the personal data and want us to restrict processing of your personal data while we verify its accuracy;
- The processing is unlawful, but you request a restriction of the processing rather than erasure;
- We (as controller) no longer need the data for the purposes of the processing, but you have told us you require us to retain that personal data for you to establish, exercise or defend legal claims; or
- You have objected to us processing your personal data on grounds of legitimate interests and want us to restrict processing of your personal data while we consider your objection.
If you would like to exercise any of these rights, please contact us using the details set out at the top of this policy.
If we can’t remedy an issue you have
Should you have any complaints or issue with our treatment of your personal data, you may lodge a complaint with the Information Commissioner’s Office (https://ico.org.uk).
Hendy Foundation website:
We try to keep our website secure. However you recognise when providing your information to us through our websites, or when you send us or ask us to send you any of your confidential information by e mail, that the internet and email communications over the internet may not be secure. We cannot be responsible for any loss or unauthorised interception of information transmitted via the internet, which is beyond our control.
Our internet site may contain links to other websites outside of our group. Our privacy policy only applies to our website. We are not responsible for the content, privacy or security of other websites.
When you visit our website, our web server automatically records your IP address, the website from which you visit us, the web pages you actually visit and the date and length of your visit.
Use of cookies on Hendy Foundation website:
A ‘cookie’ is a piece of information that a website transfers to the cookie file of the browser on your computer’s hard disk, so that the website can remember who you are. A cookie will typically contain the name of the domain from which the cookie has come, the ‘lifetime’ of the cookie, and a value, usually a randomly generated unique number.
When you visit our website we may send you a cookie. We may use cookies in the following ways:
- To help us recognise you as a unique visitor (not just a number) when you return to our website and to allow us to tailor content of our site to match your preferred interests; and
- To compile anonymous, aggregated statistics that allow us to understand how users use our site and to help us improve the structure of our website. We cannot identify you personally where we use cookies in this way.
Two types of cookies may be used on our website:
- Session cookies, which are temporary cookies that remain in the cookie file of your browser, usually until you close your browser; and
- Persistent cookies, which remain in the cookie file of your browser for longer, (how long will depend on the lifetime of the specific cookie).
Disabling/Enabling Cookies:
You can accept or decline cookies by modifying the settings in your browser. However, you may not be able to use all the interactive features of our website if cookies are disabled.
You can find information on how to disable or enable cookies by visiting www.allaboutcookies.org.
