GDPR Privacy Notice

2     Data Protection Contact
If you have any data protection queries, please contact the WHVH Administrator, who is also WHVH’s Data Protection Lead, at whvhbooking@gmail.com or on 01483 285454.
 

WHVH complies with data protection law which states that the personal information we hold about you must be:

a)     used lawfully, fairly and in a transparent way

b)     collected only for valid purposes that we have clearly explained to you and not used in any way that is

        incompatible with those purposes

c)     relevant to the purposes we have told you about and limited only to those purposes

d)     accurate and kept up-to-date

e)     kept only as long as necessary for the purposes we have told you about

f)      kept securely.

The object of WHVH, as stated in its Constitution, is “the provision and maintenance of a village hall for the use of the inhabitants of the Parish of West Horsley without distinction of political, religious or other opinions, including use for meetings, lectures and classes, and for other forms of recreation and leisure-time occupation, with the object of improving the conditions of life for the said inhabitants”.

We need to know and retain your personal data in order to provide you with the service which you expect from us, ie to hire WHVH, including (if applicable), updates on matters relating specifically to WHVH and the hire thereof.  This includes your name, address, e-mail address and telephone number(s).  We will not collect any personal data from you which we do not need in order to provide and oversee this service to you.

All organisations which hold personal data are required to identify a “Lawful Basis” in order to process personal data.    Following an overview of what data is held and why, the lawful basis on which WHVH relies is “Contract”, ie the processing is necessary to enable WHVH to provide the service expected by the hirer.  You are not obliged to provide the personal data in question. However, if you do not allow WHVH to process your personal data, you will not be able to hire WHVH because we will not be able to provide the service you expect from us, ie the contract we have with you.

 

Personal data, received direct from you, is held and processed by WHVH in order to provide the service to you.

We use a third party service provider called “Hallmaster” to provide WHVH’s online diary and booking request system. Personal data may be transferred to Hallmaster, who act for or on WHVH’s behalf, for further processing in accordance with the purpose(s) for which the data was originally collected or may otherwise be lawfully processed.  Hallmaster has contracted with WHVH as a data processor under the requirements of GDPR.  They are contractually bound only to use personal data for the agreed purpose(s).  Relevant persons working for Hallmaster will have access to your personal data under the terms of the data processor contract but only to the extent necessary to perform their services to WHVH. Hallmaster agrees to implement reasonable contractual and technical protections, to keep your data confidential, not sell your personal data to third parties and not to disclose your personal data to third parties except as may be required by law, as permitted by us or as stated in this Privacy Policy.

In appropriate circumstances, we may disclose data to authorised bodies as required by law.

Other than as described above, no other third parties have access to your personal data and WHVH does not share or sell personal data, nor will it be used for marketing or fund-raising activities.  In the very unlikely event that WHVH wished to use personal data for marketing or fund-raising activities, direct consent would be sought from hirers prior to such activities taking place.

We will keep personal data for as long as is required to provide the service to you and in accordance with statutory requirements and WHVH’s retention policy which is available on request.  Any financial data arising from a transactional process will be held securely by WHVH in accordance and compliance with all statutory and HMRC requirements.

 

GDPR provides the following rights for individuals (subject to some exemptions):

a)    The right to be informed (implicit in this Privacy Notice);

b)    The right of access to the personal data that we hold about you;

c)    The right to rectification of personal data held about you;

d)    The right of erasure of personal data held about you (also known as “the right to be forgotten”);

d)    The right to request restriction of processing about you;

e)    The right to object to processing;

f)     The right to data portability: and

g)    Rights in relation to automated decision-making and profiling.

If we receive a request in accordance with the above rights, we will respond within 30 days of the date of receipt of the request.  You should note that, if you request that WHVH restricts the processing of data about you or you wish to object to processing, you will not be able to hire WHVH in future.  No personal data is processed by WHVH for automated decision-making or profiling.

If you wish to raise a complaint on how we have handled your personal data, you can contact WHVH’s Data Protection Lead using the details in section 2 above.

If you are not satisfied with our response or believe that we are not processing your personal data in accordance with the law, you can complain to The Information Commissioner’s Office (“ICO”), full contact details for which can be found at https://ico.org.uk/global/contact-us/.

May 2018