On 25 May 2018, the new General Data Protection Regulation (GDPR) came into force. The regulations now operate across the EU and supplement the existing Data Protection Act (DPA). More about the GDPR and its relationship to the DPA can be found on the website of the Information Commissioner’s Office (ICO) at https://ico.org.uk/ The ICO is the body responsible for implementing the legislation.
The general thrust of the GDPR gives extra duties to organisations, such as RACB, which hold personal data [1] and extra safeguards to those members of the public, such as RACB drivers, whose personal data is held. Organisations holding personal data are called Data Controllers [2].
The purpose of this Personal Data Collection, Handling, Processing and Storage Statement is to explain how the RACB obtains and manages personal data for which it is Data Controller as well as to set out its general approach to compliance with the GDPR.
This Statement should be read in conjunction with the Risborough Area Community Bus (RACB) General Data Protection Policy and has been produced to enable subscribers to the RACB website to be aware of how RACB will collect, handle, process and store their personal data.
Subscribers to the RACB website are those people contacting RACB through the website; to (a) register for the RACB Newsletter (b) to register their initial interest in becoming a volunteer driver for RACB or (c) contacting RACB about any other matter using the ‘contact us form’.
The RACB only collects, stores and processes information which you give us; not from any other sources.
We hold the personal data of subscribers to the RACB website to enable RACB to communicate effectively with subscribers and respond to their enquiries.
The RACB only collects, handles, processes and stores personal data which you give us; not from any other sources.
The following personal data is collected from subscribers to the RACB website. This information is requested from the subscriber when the subscriber makes first contact with RACB through the website.
Name
Phone numbers
Email address
RACB will use your personal data to keep you informed about matters connected with RACB operations and to respond to any correspondence or query from you.
We will only use your personal data within RACB for the purposes for which it was obtained.
RACB will not, under any circumstances, pass your details to any other person or organisation without your explicit consent – which must be obtained on every occasion.
However, we will comply with legal requests from authorised, official bodies (e.g. our insurers, the police, etc.) where disclosure is required or permitted by law.
We will retain your personal data so long as you remain a subscriber to the RACB website.
We will delete your personal data 12 months after you have ceased to be associated with RACB or at any time at your request.
Subscriber’s personal data is protected in accordance with the Risborough Area Community Bus (RACB) General Data Protection Policy, which has been developed to ensure RACB complies with the General Data Protection Regulation (GDPR).
You have the right to:
By providing us with your personal data you consent to its use in accordance with this Personal Data Handling and Processing Statement.
This Personal Data Handling and Processing Statement may be updated from time to time to ensure we keep in line with the law and best practice.
This Statement was last reviewed on 1 January 2022
[1] Personal Data means any information relating to an identified or identifiable natural person.
[2] A Data Controller is a person who, either alone or together with other persons, determines the purposes for which and the manner in which any personal data are, or are to be, processed.