DATA PROTECTION POLICY

Your personal data is data, which, by itself or with other data can be used to identify you.  We are Edinburgh Ltd, an open access, multi-discipline workshop space.

This data protection statement sets out how we use your personal data.  If you have any questions about any part of this statement, please contact the office on 0131 555 6866

Your rights under applicable data protection law:

• The right to be informed about the processing of your personal data

• The right to have your personal data corrected if it’s inaccurate and competed if it’s incomplete

• The right to object to the processing of your personal data

• The right to restrict processing of your personal data

• The right to ‘be forgotten’ and have your personal data erased

• The right to request access to your personal data and information about how we process it

• The right to move, copy or transfer your personal data

• Rights in relation to automated decision-making, including profiling

The rights do not apply in all circumstances.  For more information or to make a complaint about the way we handle data you can contact the Information Commissioners Office.  It has enforcement powers and can investigate compliance with data protection law: ico.org.uk

The types of personal data we collect and use:

1. Full Name

2. Contact address

3. Contact email

4. Contact phone number

5. Mobile phone number

6. Membership start date

7. Membership end date

Why that personal data is held:

In order to comply with HMRC & UK law

In addition, we hold the data:

a) In case you exercise your rights under data protection law and make requests

b) For compliance with legal and regulatory requirements

Sharing of your personal data:

Subject to applicable data protection law and only if necessary, we may share the data we hold with:

• Our legal and professional advisors, including auditors

• Fraud prevention officers, credit reference agencies and debt collection agencies

• HMRC or other government bodies

• Courts, to comply with legal requirements bodies and for the administration of justice

• In an emergency

In Summary...

We do: hold your personal data as required by law

We do: hold your personal data to help us run our business efficiently

We do: respect your privacy and work hard to ensure we meet strict the GDPR requirements

We don’t: use automated ‘decision making systems’ (profiling)

We don’t: sell your personal data to third parties

This statement is subject to annual review.  All members will receive updates by their preferred contact method as they are made.  Large text and hard copies of this statement are available from the office.

Last Updated: April 2018