On 25 May 2018, the new General Data Protection Regulation (GDPR) came into force. The regulations now operate across the EU and supplement the existing Data Protection Act (DPA). More about the GDPR and its relationship to the DPA can be found on the website of the Information Commissioner’s Office (ICO) at https://ico.org.uk/ The ICO is the body responsible for implementing the legislation.
The general thrust of the GDPR gives extra duties to organisations, such as RACB, which hold personal data [1] and extra safeguards to those members of the public, such as RACB drivers, whose personal data is held. Organisations holding personal data are called Data Controllers [2].
The purpose of this Privacy Notice is to explain how the RACB obtains and manages personal data for which it is Data Controller as well as to set out its general approach to compliance with the GDPR.
This Notice should be read in conjunction with the Risborough Area Community Bus (RACB) General Data Protection Policy and has been produced to enable subscribers to the RACB website to be aware of how RACB will collect, handle, process and store their personal data.
Subscribers to the RACB website are those people contacting RACB through the website to:
Some subscribers may become RACB Volunteers or may already be an RACB Passenger for which there is a separate Privacy Notice.
The RACB only collects, stores and processes information which you give us; not from any other sources.
We hold the personal data of subscribers to the RACB website to enable RACB to communicate effectively with subscribers and respond to their enquiries.
The RACB only collects, handles, processes and stores personal data which you give us; not from any other sources.
The following personal data is collected from subscribers to the RACB website. This information is requested from the subscriber when the subscriber makes first contact with RACB through the website.
Name
Phone numbers
Email address
RACB will use your personal data to keep you informed about matters connected with RACB operations and to respond to any correspondence or query from you.
We will only use your personal data within RACB for the purposes for which it was obtained.
RACB will not, under any circumstances, pass your details to any other person or organisation without your explicit consent – which must be obtained on every occasion.
However, we will comply with legal requests from authorised, official bodies (e.g. our insurers, the police, etc.) where disclosure is required or permitted by law.
We will retain your personal data so long as you remain a subscriber to the RACB website.
We will delete your personal data 12 months after you have ceased to be associated with RACB or at any time at your request.
Subscriber’s personal data is protected in accordance with the Risborough Area Community Bus (RACB) General Data Protection Policy, which has been developed to ensure RACB complies with the General Data Protection Regulation (GDPR).
You have the right to:
By providing us with your personal data you consent to its use in accordance with this Privacy Notice.
This Privacy Notice may be updated from time to time to ensure we keep in line with the law and best practice.
This Privacy Notice was last reviewed in July 2024.
[1] Personal Data means any information relating to an identified or identifiable natural person.
[2] A Data Controller is a person who, either alone or together with other persons, determines the purposes for which and the manner in which any personal data are, or are to be, processed.
Copyright
© RACB. All Rights Reserved.
Website Design & Development Beyond Your Brand.