Welcome to www.refugeerights.org.uk, a website provided to you by Refugee Rights Europe.
This is our Privacy Notice for supporters and donors.
This Privacy Notice aims to inform you on how we collect, process and handle the personal data provided to us by your use of www.refugeerights.org.uk (the ‘Website’), including data you choose to give us by signing up to our newsletter, or making an online donation.
We respect your privacy and are committed to protecting your personal data.
It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.
How and what personal data is obtained, and what is it used for?
Our Website features various forms where you can enter your personal data. These forms and the way we use the data you input into them, are listed below. Refugee Rights Europe does not collect personal data from you by any means other than from these forms. As you interact with our website, we may automatically collect data about your equipment, browsing actions and patterns (such as Your internet protocol (IP) address, Your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices You use to access this website). We collect this personal data by using cookies, server logs and other similar technologies. We may also receive data of this kind about you if you visit other websites employing our cookies. Please see our cookie declaration below for further details.
Subscribing to our newsletter: we collect your first and last names and your email address so that we can send you our regular email newsletter via MailChimp, a platform which has confirmed it will be GDPR compliant no later than 25 May 2018.
Donating online: we collect your first name, surname, email address, and postal address in order to receive any donation from you, to process any connected gift aid, and to process any repeat monthly donations. We will also send confirmation to your email address that the donation has been received by us. Donations are processed by GlobalGiving; you will be forwarded to their website to make the donation. GlobalGiving confirms that it will be GDPR compliant no later than 25 May 2018.
What lawful basis informs our use of your personal data?
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
- where we need to comply with a legal or regulatory obligation; or
- to carry out your request(s).
Personal data collected through this Website will only be used for the purposes for which it was provided, as listed above. Once this purpose has been fulfilled your details will be deleted unless you have requested that we retain them.
Our ‘legitimate interests’ means Refugee Rights Europe’s interest in conducting and managing our charity in pursuit of its charitable aims. We make sure we consider and balance any potential impact on you (positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or we are otherwise permitted by law).
Will your personal data be shared with third parties?
We may have to share your personal data with the parties set out below for the purposes set out above.
- external third parties such as HMRC, regulators and other authorities based in the United Kingdom who require reporting of processing activities in certain circumstances;
- GlobalGiving UK (for processing donations); [and]
- third parties to whom we may choose to transfer, or merge parts of our charity or our assets with. Alternatively, we may seek to acquire other charities or merge with them. If a change happens to our charity, then the new owners may use your personal data in the same way as set out in this privacy notice.
We require all third parties who we engage to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We will not normally share any information we hold about you to others without your prior consent, unless one of the following exceptions apply. We may disclose information we hold about you:
- if it is necessary for law enforcement or similar purposes;
- as a necessary part of providing you with our service(s) or contacting you as a supporter – for example, by using a third party mailing house to process our communications;
- as a necessary part of ensuring we comply with our legal obligations as a data controller – for example, by using a third party to migrate data or ensure it is accurate and up-to-date.
For how long will my data be kept?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
You can opt out of any of our communications at any time, at which point we will delete any data you have provided to us.
Will my personal data be secure?
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, team members, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
Where can I file a request to access, correct or erase my data?
If you wish to access your data that is processed through this Website, you can send a request by e-mail to email@example.com.
You can ask us to erase, correct or show you any personal data we hold on you.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).
Following your request for access, you can request correction or removal of your data unless there are other legal reasons why we must retain your data.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Subject Access Request Procedure
You have the right to request access to data held by Refugee Rights Europe about you. We will respond to such requests free of charge, but we are permitted to charge a “reasonable fee” when a request is manifestly unfounded, excessive or repetitive. This fee will be based on the administrative cost of providing the information. We will respond to such requests within one month. Where requests are complex or numerous, we are permitted to extend the deadline to three months. However, we will still respond to the request within a month to explain why the extension is necessary.
To make a request, please email firstname.lastname@example.org with subject line ‘Data Subject Request’. You may wish to use this template or use your own. You may also make the request via telephone, post, or through this webform. Please contact us via the webform or email to obtain the telephone number for such requests.
How to contact us
Post: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Our registered charity number is 1168841.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
For more information about your legal rights in relation to the information we hold about you, please visit the Information Commissioner’s Office at ico.org.uk.