Privacy Notice – National Trust Projects

Privacy Notice – National Trust projects

 

What personal data do we hold and where do we get this information?

Personal data is defined under the UK General Data Protection Regulation (UK GDPR) as ‘any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier’.

This research does not require the collection of personal data from you.

Your participation is voluntary.

If you raise a query or complaint and provide personal data requesting a response, the researcher will forward the request only to the relevant member of 20 Degrees or National Trust Cymru and subsequently delete it from the research data.

What is the lawful basis for using your data?

The lawful basis for processing information in this data collection exercise is for the legitimate interest of National Trust Cymru to understand public perceptions about itself and its activities.

How secure is your personal data?

Personal data provided to 20 Degrees is held on secure servers, and for this project a folder has been created that has access restricted only to the immediate research team. Your contact details and any further personal data you choose to provide will be stored in this restricted folder. The researchers will not provide any personal information when reporting findings.

When conducting surveys, 20 Degrees uses a survey software programme called Survey Monkey. This software meets our expectations in terms of the security of any data collected via the software. However, servers may be located outside the UK, potentially in the USA or Europe.

20 Degrees has procedures to deal with any suspected data security breaches. If a suspected breach occurs, 20 Degrees will notify you and any applicable regulator where we are legally required to do so.

The research team will use the information gathered to produce an evaluation report. This report will not include any information that could be used to identify individual participants, unless you have given us explicit permission to do so.

How long do we keep your personal data? 

Any personal data not already removed during analysis will be deleted by the research team within 3 months of the completion of the final report. This includes removing your contact details from the research folder. If you have given your permission for us to retain contact details for ongoing contact then these will be retained according to our records retention policy.

Individual rights

Under UK GDPR, you have the following rights in relation to the personal information you provide as part of this review, specifically you have the right:

  •       To access a copy of your own data;
  •       For us to rectify inaccuracies in that data;
  •       To object to or restrict processing (in certain circumstances);
  •       For your data to be ‘erased’ (in certain circumstances); and
  •       To lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection.

The contact details for the Information Commissioner’s Office are: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Phone: 0303 123 1113. Website: www.ico.org.uk

Further Information

If you have any further questions about how the data provided as part of this study will be used by 20 Degrees or National Trust Cymru or wish to exercise your rights using the UK General Data Protection Regulation, please contact:

Name: Alun Hughes

E-mail address: alun.hughes@20degrees.co.uk

Telephone number: 029 2169 0255