The Thomas Oken and Nicholas Eyffler Charity (“the Charity”) is committed to protecting your personal information, being transparent about the information we hold about you and ensuring your personal data is only ever used in accordance with your rights and expectations.
The Charity is a Registered charity based in Warwick with charity number 216829.
When we refer to:
How to contact us and how to complain
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
The Data we collect about you
We collect information about you in various ways. For example, information you give us, when you make a donation to us, make an application to us, or otherwise provide us with personal information in person, over the telephone, through the post or online via email or our website.
Wherever possible we use aggregated or anonymous information which does not identify individuals by name. For example, if we are reviewing, or evaluating a current project that is being funded by the charity, which includes individuals who have been involved in projects but are not directly identified.
We do, at times, need to collect, store and use certain personal information. For example, information you give to us should you apply for one of the properties owned by the Charity such as Castle Hill Alms Houses or Guild Cottages. In such cases personal information such as name, postal address, telephone number, email and financial details may be stored.
Certain categories of personal information are regarded by the law as more sensitive than others. This is known as ‘special category’ or ‘sensitive data’ which covers things like your health information, ethnic origin, or political views. We do not usually collect ‘sensitive personal data’ but we will make it clear to you when and why we need to collect it should we need to.
How we use your personal data
We only use your personal data when we have a proper reason for doing so. There are various legal bases upon which we may rely, depending on what personal data we process and why.
The legal bases we rely on most commonly to process your data include:
In a small number of cases, we may also rely on the following legal bases:
In relation to any “special category” personal data or data concerning criminal convictions and offences, we rely on different reasons to process your personal data. Most commonly these include that the processing is:
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
If you have given your consent for us to process your personal data, you have the right to change your mind at any time and withdraw your consent.
Who we share your personal data with
We do not share personal data with anyone unless:
We take the security of your personal data seriously. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those who have a business need to know. They will only process your personal data on our instruction, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
Different retention periods apply for different types of personal data. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
At the end of the relevant retention period, your personal data will either be deleted completely, put beyond use or anonymised. Some data about members will be kept in perpetuity as a record of our history and heritage.
Details of retention periods for different types of personal data are available in our retention policy which you can request from us by contacting us.
Under the data protection law you have rights including:
If you wish to exercise any of these rights, please contact the Clerk to the Charity at firstname.lastname@example.org or 34 High Street, Warwick, CV34 4BE or on 01926 478 008, and let us have enough information to identify you.
If you request the personal data that we hold about you, we will respond within one month (unless the complexity and number of requests mean that we need more time).
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
Updated April 2022