Background
On 25 May 2018, the new General Data Protection Regulation (GDPR) came into force. The regulations now operate across the EU and supplement the existing Data Protection Act (DPA). More about the GDPR and its relationship to the DPA can be found on the website of the Information Commissioner’s Office (ICO) at https://ico.org.uk/ The ICO is the body responsible for implementing the legislation.
The general thrust of the GDPR gives extra duties to organisations, such as RACB, which hold personal data [1] and extra safeguards to those members of the public, such as RACB drivers, whose personal data is held. Organisations holding personal data are called Data Controllers [2].
The purpose of this Personal Data Collection, Handling, Processing and Storage Statement is to explain how the RACB obtains and manages personal data for which it is Data Controller as well as to set out its general approach to compliance with the GDPR.
This Statement should be read in conjunction with the Risborough Area Community Bus (RACB) General Data Protection Policy and has been produced to enable subscribers to the RACB website to be aware of how RACB will collect, handle, process and store their personal data.
Definition of a subscriber to the RACB website?
Subscribers to the RACB website are those people contacting RACB through the website; to (a) register for the RACB Newsletter (b) to register their initial interest in becoming a volunteer driver for RACB or (c) contacting RACB about any other matter using the ‘contact us form’.
How and when do we collect information about you?
The RACB only collects, stores and processes information which you give us; not from any other sources.
Why do we hold personal data?
We hold the personal data of subscribers to the RACB website to enable RACB to communicate effectively with subscribers and respond to their enquiries.
How and when do we collect information about you?
The RACB only collects, handles, processes and stores personal data which you give us; not from any other sources.
What information does RACB collect about you?
The following personal data is collected from subscribers to the RACB website. This information is requested from the subscriber when the subscriber makes first contact with RACB through the website.
Name
Phone numbers
Email address
How will RACB use your data?
RACB will use your personal data to keep you informed about matters connected with RACB operations and to respond to any correspondence or query from you.
Will RACB Share your information with anyone?
We will only use your personal data within RACB for the purposes for which it was obtained.
RACB will not, under any circumstances, pass your details to any other person or organisation without your explicit consent – which must be obtained on every occasion.
However, we will comply with legal requests from authorised, official bodies (e.g. our insurers, the police, etc.) where disclosure is required or permitted by law.
How long will RACB retain your personal information?
We will retain your personal data so long as you remain a subscriber to the RACB website.
We will delete your personal data 12 months after you have ceased to be associated with RACB or at any time at your request.
How does RACB keep my data safe?
Subscriber’s personal data is protected in accordance with the Risborough Area Community Bus (RACB) General Data Protection Policy, which has been developed to ensure RACB complies with the General Data Protection Regulation (GDPR).
Your Rights
You have the right to:
- Receive a copy of the personal data we hold on you by emailing us at This email address is being protected from spambots. You need JavaScript enabled to view it.
- Have corrected any errors or omissions in the personal data held.
- Withdraw your consent for us to hold your personal data at any time by emailing us at This email address is being protected from spambots. You need JavaScript enabled to view it.. If you withdraw consent for the use of your data you will no longer be able to be associated with RACB.
- Make a complaint to the Information Commissioner’s Office on 0303 123 1113 or at https://ico.org.uk/concerns
Your Consent
By providing us with your personal data you consent to its use in accordance with this Personal Data Handling and Processing Statement.
Changes to this Personal Data Handling and Processing Statement
This Personal Data Handling and Processing Statement may be updated from time to time to ensure we keep in line with the law and best practice.
This Statement was last reviewed on 1 January 2022
