Privacy Policy
Introduction
Your privacy is important to the Ogmore-by-sea Village Hall Association (OBS VHA). OBS VHA may need to collect information from you in order to tell you about our activities, events and services. If you are a hirer of Ogmore-by-sea Village Hall, OBS VHA may need to hold data about you for invoicing purposes, and as part of your hirer agreement.
Who we are?
In this privacy notice, “we”, “us”, “our” or “Charity” mean Ogmore-by-sea Village Hall Association.
OBS VHA values your privacy, and therefore does not disclose information to third parties without your express permission. We will only use the information that we collect about you lawfully in accordance with the provisions of the General Data Protection Regulation 2018. For the purpose of the General Data Protection Regulation 2018, the data controller is the OBS VHA.
What information do we collect?
OBS VHA may collect your contact details (e.g. name, email address, etc) so that OBS VHA can contact you. OBS VHA may collect financial details so that OBS VHA can make or receive payment from you for goods or services.
OBS VHA may record CCTV images to ensure the safety of the Village Hall and its employees, volunteers, trustees (staff) and users.
OBS VHA may also collect information on staff to ensure that OBS VHA can meet our legal obligations.
How do we use personal information?
We process your personal information for the purposes set out in this privacy notice and also if there are legal reasons that require us or allow us to process your personal information.
By law, we must have a lawful reason for processing your personal information.
We process personal information about you if this:
- enables us to provide the services for which you have contracted,
- is in our or a third party’s legitimate interests (see below)
- is required or allowed by law
What legal basis do we have for processing your personal data?
Legitimate interest is one of the legal reasons why we may process your personal information. These legitimate interests include:
- managing all aspects of our relationship with you,
- marketing purposes,
- to help us develop services,
- to exercise our rights, to defend ourselves from claims and to keep to laws and regulations that apply to us and any third parties that we work with
OBS VHA also uses your consent to hold data about you. There will be some circumstances where EGVH are only able to provide you with services if you consent to providing necessary information, for example, room bookings.
When do we share personal data?
We do not share your data with external organisations or third parties unless required to do so by law.
Where do we store and process personal data?
If applicable, explain if you intend to store and process data outside of the data subject’s home country. Outline the steps you will take to ensure the data is processed according to your privacy policy and the applicable law of the country where data is located.
If you transfer data outside the European Economic Area, outline the measures you will put in place to provide an appropriate level of data privacy protection. Eg contractual clauses, data transfer agreements, etc.
How do we secure personal data?
We may use global information systems. This may result in the transfer of your information to countries outside the European Economic Area for the purposes set out in this privacy policy. Not all countries outside the EEA have data protection laws that are similar to those in the EEA and if so the European Commission may not consider that those countries provide an adequate level of data protection.
We take steps when using global information services that they are GDPR compliant and that we obtain evidence of their compliance.
All physical data will be held securely in a locked cabinet in a non-public location, accessible only by designated staff members of OBS VHA.
How long do we keep your personal data for?
We retain your personal information in accordance with the following criteria:
- How long you have been a hirer and when you stop being a hirer
- How long it is reasonable for records to show that we have met all our obligations to you as well as any legal obligations.
- Any periods for keeping information that are set by law or recommended by regulators, professional bodies or associations
- For as long as any proceedings may dictate
Your rights in relation to personal data
You have the following rights in relation to your information:
- Right to be informed – you have the right to be informed on the collection and use of your personal information in accordance with this privacy notice
- Right of access – the right to make a request for details of your personal information
- Right to rectification – the right to have inaccurate information about you rectified or completed if it is incomplete
- Right of erasure (‘the right to be forgotten’) – the right in certain circumstances to have personal information about you erased
- Right to restrict processing – the right in certain circumstances to request the restriction or suppression of your personal data
- Right to data portability – the right to obtain and reuse your personal data for your own purposes
- Right to object – the right to object to the processing of your personal data in certain circumstances
Whilst the regulation dictates that these rights may be exercised by giving notice either verbally or in writing, in the interests of all parties the Charity’s preferred option is that any request in pursuit of these rights is made in writing
Use of automated decision-making and profiling
We do not carry out automated decision making or profiling with your data
How to contact us?
You can email us here
You can write to us – Ogmore-by-sea Village Hall, c/o Gleneden, Church Close, Ogmore-by-sea, CF32 0PZ.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.
