Summers Nurseries

&&COMPANY-NAME&& Data Protection Privacy Statement

Personal Data relates to a living individual who can be identified from that data, either by that data alone or in conjunction with any other data held or likely to be held by a data controller. The processing of such data is governed by the General Data Protection Regulation (GDPR).

&&COMPANY-NAME&& will comply with the GDPR by keeping personal data current; by storing and destroying it securely; by keeping data to a minimum; and by ensuring that appropriate and sufficient measures are in place to protect such data from loss, misuse, unauthorised access and disclosure.

&&COMPANY-NAME&& will use your data for the following purposes:

• To administer membership records;

• To maintain accounts and records;

The legal basis for processing your data rests with your explicit consent. We need the data to keep you informed of news and events via email, telephone or post. We also need this data to maintain accurate records for accounting purposes. Access to the data is restricted to those who need to be involved, and will only be used for genuine and legitimate reasons, and not to harm any of your rights or interests.

Sharing data. We do not as a rule share your data with anyone outside our organisation. The only exception to this would be if we were required to comply with a court order or other legal obligation, or where the data is requested by government or law enforcement authorities, to enforce any agreements or protect the rights property or safety of members or others.

If applicable, Personal Data is kept whilst it is still current and for one year after membership lapses. The data is held on a secure website by our Website Manager, with access restricted by password protection to those who need to know.

You have the right under GDPR to:

• Request a copy of your personal data which &&MAIN-SITE-URL&& holds about you;

• Request that the &&COMPANY-NAME&& corrects any personal data if it is inaccurate or out-of-date;

• Request that your personal data is no longer necessary for enquiries@&&MAIN-SITE-URL&& to retain it;

• Request that &&COMPANY-NAME&& provide you or a third party of your choice with the data we hold on you;

• Lodge a complaint with the Information Commissioner's Office.

Access requests will be replied to within 30 days.

Change of Purpose. Should &&COMPANY-NAME&& wish to use your data for a new purpose not covered by this statement, we would provide you with a new statement explaining this use prior to the change, and setting out the changes. Where necessary, we will seek your prior consent to implementing the changes.

Contact Details

If you wish to exercise your rights, or have any queries or complaints, you should contact &&COMPANY-NAME&& at enquiries@&&MAIN-SITE-URL&& or telephone &&PHONE-NUMBER&&.

If you are not satisfied with our response to your concern(s), you can contact the Information Commissioner's Office (Scotland) at Scotland@ico.org.uk or telephone 0303 123 1115, or by post at The Information Commissioner's Office - Scotland, 45 Melville Street, Edinburgh, EH3 7HL.