We, Educating for Impact (Charity no. 1177435) (“EFI”), may collect and process personal data about you as a supporter, event attendee, beneficiary, potential beneficiary and any other relevant party of EFI.
We are committed to being transparent about how we collect and use that data and to meeting our obligations under the General Data Protection Regulation.
What information do we collect about you and why?
Personal information includes (but isn’t limited to) your name, email address and telephone number, and any relevant personal information you provide us that is necessary for us to collect and process in the course of our work. Personal information may also include video footage or photos which we may display on our website.
Organisations are permitted to process data if they have a legal basis for doing so. EFI processes data on the basis that in furthering our charitable objects:
- Express and informed consent has been given by the person whose data is being processed; and/or
- EFI has a legitimate interest in processing the data; and/or
- It is necessary in relation to a contract or agreement which the person has entered into because the person has asked for something to be done so they can enter into a contract or agreement; and/or
- There is a legal obligation on EFI to process data.
You may change or request deletion of your data at any time in writing, subject to any overriding legal obligation that we may have for its retention. We do not, and never would, profile your information; nor would we ever sell your information to a third party.
Who has access to your personal data?
Your information may be shared internally with employees, consultants and trustees of EFI. We may also share contact information with relevant participants of EFI programs with your consent. We do not share your data with third parties and will not transfer it outside the European Economic Area, which, for the purposes of GDPR, includes Israel.
How do we protect your personal data?
EFI takes the security of your data seriously. We have internal controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees/consultants/trustees in the performance of their duties. We cannot accept responsibility for the protection of any video or photographic data included on our website.
For how long does EFI keep data?
EFI will not keep your personal data for longer than necessary. If you are not happy with this, please see below for an explanation of your rights.
You have a number of rights. You can:
(a) Access and obtain a copy of your data on request;
(b) Require us to change incorrect or incomplete data;
(c) Require us to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; and
(d) Object to the processing of your data.
If you would like to exercise any of these rights, please contact EFI at firstname.lastname@example.org, specifying the name of the organisation with which you are associated.
If you believe that we have not complied with your data protection rights, you can complain to the Information Commissioner.