London Decompression is committed to safeguarding your privacy. The collection and use of personal data by us is in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”).
This privacy policy only covers personal data collected and used by London Decompression. This Privacy Policy applies to our processing of your personal data, including when you become a member, attend one of our events, or volunteer with us.
Please read the following policy to understand how your personal data will be treated. This policy was last updated on 6th November 2019, and may change from time to time – so please please check back periodically.
Who do we collect data from?
Visitors to our website
We may inadvertently collect a limited amount of data automatically from our website users. This may include information such as demographic data, location data, device categories and settings, and browsing patterns. Should we collect this information, we use it in aggregate form such that it would not identify you.
Like most websites, we also use “cookies” for the above and to carry out targeted advertising to you on third party websites.
Volunteering or working with us
If you volunteer for us (or offer to do work for us in any capacity) we may collect information necessary for us to process any applications and assess your suitability (which may include things like employment status, previous experience depending on the context, as well as any unspent criminal convictions or pending court cases you may have); your age, nationality and ethnicity information for monitoring purposes; and any other personal information you provide to us.
We generally collect your personal data directly from you, for example when you sign up to volunteer online (including through submitting an application to bring an activity to our events via our online submission form), attend one of our events, or volunteer to help at a meeting. This information is likely to include (but not limited to):
- your name
- your contact details (including postal address, telephone number, email address)
- information relating to your health (solely for health and safety purposes, for example if you are not able to climb ladders, etc).
Any other personal information you provide to us, including for the purposes outlined in the previous sections
Certain types of personal information are in a special category under data protection laws, as they are considered to be more sensitive. Examples of this would be information about health, race, ethnicity, religious beliefs, political views.
We only collect this type of information where there is a clear reason for us to do so, for example asking for health information if you are taking part in a health and safety risk activity, or where we ask for information for the purpose of providing appropriate facilities or support.
Attendees at our events
We are a members’ based organisation, and we collect information on our members for the purposes of understanding who our members are, and in order to provide to our members the services that they sign up to attend.
We generally collect your personal data directly from you, for example when you engage with our membership system to obtain a membership number in order to attend one of our events. This information is likely to include (but is not limited to):
- your name
- your contact details (including postal address, telephone number, email address)
We also collect your information when you give it to us indirectly, for example when you engage with us through other websites such as our ticketing partner. These independent third parties will only share your information with us when you give consent.
How does London Decompression use your information?
We may use your information in a number of different ways. For information about the legal conditions which allow us to use your information, please see “What legal conditions do we rely on for processing your personal data?”.
We may use your information to:
- provide you with the services, products or information you asked for
- keep you informed about relevant events
- respond to or fulfil any request, complaints or queries you make to us
- send you correspondence and communicate with you
- personalise our communications e.g. pre-filling forms on our website when you have already provided this at an
- earlier time, in order to improve your experience on our website
- help reporting and segmentation, to improve our communications and for improving our website
- keep a record of your relationship with us
- manage our events
- further London Decompression’s objectives
- conduct due diligence
- process your application for a job or a volunteering position
- audit and administer our accounts
- meet our legal obligations
- invite you to participate in surveys or research
Please note that regardless of communication preferences, we can still contact you for administration purposes. This could include providing you with information in relation to an event you have paid to attend. We may send you an email, for example, to tell you about any local requirements for entering an event we’ve organised, a newsletter about the forthcoming event, and items specifically related to London Decompression.
If you indicated you were happy for your details passed on to selected 3rd parties that London Decompression thinks will be of interest to you, they might contact you through email.
If you no longer wish to receive marketing communications from us, you may:
- Contact us at info@londondecom.org;
- Click on the unsubscribe link on any digital marketing communication that you receive from us.
Who do we share your information with?
We may disclose your information to third party service providers who require access to such information for the purpose of providing specific services to us, such as those already mentioned above, and for the purpose of processing data for reporting on or sending our own communications or fulfilment of orders. These third parties will generally only be able to access your information in order to provide us with their services and will not be able to use it for their own purposes.
We may disclose your information to professional advisors (such as legal advisors and accountants) or auditors for the purpose of providing professional services to us.
We enter into contracts with these service providers that require them to comply with Data Protection Laws and ensure that they have appropriate controls in place to secure your information.
Legal disclosure
We may disclose your information if required to do so by law (for example to comply with applicable laws, regulations and codes of practice or in response to a valid request from a competent authority); or in order to enforce our conditions of sale and other agreements.
How do we keep your data safe?
We will take all reasonable precautions necessary to protect your personal data from misuse, interference and loss; and unauthorised access, modification or disclosure. For example, we work hard to ensure data is encrypted when in transit and storage, and access to this data will be strictly limited to a minimum number of individuals.
Details on volunteers is available to those who are volunteering with London Decompression to help organise events.
Unfortunately, there is always risk involved in sending information through any channel over the internet. You send information over the internet entirely at your own risk. Although we will do our best to protect your information, we cannot guarantee the security of your data transmitted over the internet and we do not warrant the security of any information, including your information, which you transmit to us over the internet.
What are my rights?
You have various rights in relation to the data which we hold about you. We have described these below.
To get in touch with us about any of these rights, please contact us at info@londondecom.org.
We will seek to deal with your request without undue delay, and in any event within one month (subject to any extensions to which we are lawfully entitled). Please note that we may keep a record of your communications to help us resolve any issues which you raise.
The GDPR gives you the following rights in relation to your personal data:
Right to object
This right enables you to object to us processing your personal data where we do so for one of the following reasons:
- it is in our legitimate interests to do so (for further information please see “What legal conditions do we rely on
- for processing your personal data?” below);
- to enable us to perform a task in the public interest or exercise official authority;
- to send you direct marketing materials – see “How does London Decompression use your information”; or
- for scientific, historical, research, or statistical purposes.
Right to withdraw consent
Where we have obtained your consent to process your personal data for certain activities (for example, for marketing), you may withdraw this consent at any time and we will cease to use your data for that purpose unless we consider that there is an alternative legal basis to justify our continued processing of your data for this purpose, in which case we will inform you of this condition.
Data Subject Access Requests
You may ask us for a copy of the information we hold about you at any time, and request us to modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this unless permitted by law. If you request further copies of this information from us, we may charge you a reasonable administrative cost. Where we are legally permitted to do so, we may refuse your request. If we refuse your request we will always tell you the reasons for doing so.
Right to erasure
You have the right to request that we “erase” your personal data in certain circumstances. Normally, this right exists where:
- The data are no longer necessary;
- You have withdrawn your consent to us using your data, and there is no other valid reason for us to continue;
- The data has been processed unlawfully;
- It is necessary for the data to be erased in order for us to comply with our obligations under law; or
- You object to the processing and we are unable to demonstrate overriding legitimate grounds for our continued processing.
We would only be entitled to refuse to comply with your request for erasure in limited circumstances and we will always tell you our reason for doing so.
When complying with a valid request for the erasure of data we will take all reasonably practicable steps to delete the relevant data.
Right to restrict processing
You have the right to request that we restrict our processing of your personal data in certain circumstances, for example if you dispute the accuracy of the personal data that we hold about you or you object to our processing of your personal data for our legitimate interests. If we have shared your personal data with third parties, we will notify them about the restricted processing unless this is impossible or involves disproportionate effort. We will, of course, notify you before lifting any restrictions on processing your personal data.
Right to rectification
You have the right to request that we rectify any inaccurate or incomplete personal data that we hold about you. If we have shared this personal data with third parties, we will notify them about the rectification unless this is impossible or involves disproportionate effort. You may also request details of the third parties that we have disclosed the inaccurate or incomplete personal data to. Where we think that it is reasonable for us not to comply with your request, we will explain our reasons for this decision.
Right of data portability
If you wish, you have the right to transfer your personal data between service providers. In effect, this means that you are able to transfer the details we hold on you to another third party. To allow you to do so, we will provide you with your data in a commonly used machine-readable format so that you can transfer the data. Alternatively, we may directly transfer the data for you.
Right to complain
If you are unhappy with any aspect of how we are using your personal data, we would like to hear about it. Your feedback enables us to learn and improve. To make a complaint to London Decompression please contact us on info@londondecom.org.
You have the right to lodge a complaint with our regulator, who is the Information Commissioner’s Office in the UK. You can contact them in the following ways:
- Phone: 0303 123 1113
- Email: casework@ico.org.uk
- Live chat
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Do we transfer your personal data overseas?
The data that we collect from you may be transferred to, and stored at, destinations both within and outside the European Economic Area (EEA), for example, where we use a service provider that is located outside the EEA.
We want to make sure that your personal data is stored and transferred in a way which is secure. We will therefore only transfer data outside of the EEA where it is compliant with the GDPR and the means of transfer provides adequate safeguards in relation to your data. For example, this could be:
- By way of a data transfer agreement with a third party, incorporating the current standard contractual clauses adopted by the European Commission for the transfer of personal data by controllers in the EEA to controllers and processors in jurisdictions without adequate data protection laws. A copy of the standard contractual clauses is available here; or
- By transferring your data to an entity which has signed up to the EU-U.S. Privacy Shield Framework for the transfer of personal data from entities in the EU to entities in the United States of America or any equivalent agreement in respect of other jurisdictions; or
- By transferring your data to a country where there has been a finding of adequacy by the European Commission in respect of that country’s levels of data protection via its legislation; or
- Where you have explicitly consented to the data transfer.
Where we transfer your personal data outside the EEA and where the country or territory in question does not maintain adequate data protection standards, we will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.
How long will we keep your personal data?
We will not keep your personal data for longer than is necessary for the purposes for which we have collected it, unless we believe that the law or other regulation requires us to keep it or if we require it to enforce our agreements.
When it is no longer necessary to retain your personal data, we will delete the personal data that we hold about you from our systems.
(For information, our standard retention period on most data is three years. This is useful, for retaining information on those volunteering at events – it is often useful to hold the details of people previously in roles, so they can optionally be contacted by the new people in role – in case of questions. In all cases, any person can request their information be deleted at any time – as part of a ‘right to erasure’ request, and this is possible via the manner described in the ‘right to erasure’ section above).
While we will endeavour to permanently erase your personal data once it reaches the end of its retention period, some of your personal data may still exist within our systems, for example if it is waiting to be overwritten.
For our purposes, this data has been put beyond use, meaning that, while it still exists in the electronic ether, our volunteers and/or employees will not have any access to it or use it again.
What legal conditions do we rely on for processing your personal data?
There are a number of different ways that we are lawfully able to process your personal data. We have set these out below.
Where using your data is in our legitimate interests
We are allowed to use your personal data where it is in our interests to do so, and those interests aren’t outweighed by any potential prejudice to you.
We believe that our use of your personal data is within a number of our legitimate interests, including but not limited to:
- enabling of events and services run for the benefit of you and your community
- keeping a record of people who are interested in our organisation, and may wish to attend or help build our events and bring activities to our events in the future;
- protecting our organisation, and our physical and digital assets;
- developing our volunteer base;
- enabling us to communicate with you.
See also “How does London Decompression use your information”
We don’t think that any of the activities set out in this privacy policy will prejudice you in any way. However, you do have the right to object to us processing your personal data on this basis. We have set out details regarding how you can go about doing this in section “What are my rights?” above.
Where you give us your consent to use your personal data
We are allowed to use your data where you have specifically consented. In order for your consent to be valid:
- It has to be given freely, without us putting you under any type of pressure;
- You have to know what you are consenting to – so we’ll make sure we give you enough information;
- You should only be asked to consent to one thing at a time – we therefore avoid “bundling” consents together so that you don’t know exactly what you’re agreeing to; and
- You need to take positive and affirmative action in giving us your consent – we’re likely to provide a tick box for you to check so that this requirement is met in a clear and unambiguous fashion.
As part of our relationship with you, we may ask you for specific consents to allow us to use your data in certain ways. If we require your consent, we will provide you with sufficient information so that you can decide whether or not you wish to consent.
For example – we ask for your consent to email, phone or text you for communication purposes.
You have the right to withdraw your consent at any time. We have set out details regarding how you can go about this in the section “What are my rights?” above.
Where using your personal data is necessary for us to carry out our obligations under our contract with you
We are allowed to use your personal data when it is necessary to do so for the performance of our contract with you.
For example, we need to collect your contact details in order to be able to communicate with you details of the events you have signed up to attend.
Where processing is necessary for us to carry out our legal obligations
As well as our obligations to you under any contract, we also have other legal obligations that we need to comply with and we are allowed to use your personal data when we need to in order to comply with those other legal obligations.
Cookies
We use cookies to ensure that you have the best experience on our website and online communications. When you browse our website, we assume that you are happy to receive our cookies. However, you can change your cookie preferences at any time – find out more below.
What are cookies?
Cookies are small text files that websites often store on the computer hard drives of visitors to their sites. They are widely used in order to make websites work, or work better, as well as to provide information to the owners of the site. A cookie often contains a unique number, which can be used to recognise your computer and tell when a user of that computer returns to a website that it visited previously.
How does London Decompression use cookies?
We use cookies to enhance the online experience of our visitors and to better understand how our sites are used. Cookies may tell us, for example, whether you have visited our site before or to remember your order session as you go through our shopping cart or ticket buying process. We may also use cookies to show you relevant London Decompression content on third party websites such as Facebook – this is known as advertising or retargeting.
Types of cookies
There are two broad types of cookies – ‘first party cookies’ and ‘third party cookies’:
First party cookies are cookies that are served directly by the website operator to your computer, and are often used to recognise your computer when it revisits that site and to remember your preferences as you browse the site. Third party cookies are served by a service provider on behalf of the website operator, and can be used by the service provider to recognise your computer when it visits other web sites. Third party cookies are most commonly used for website analytics.
In addition, cookies may be either ‘session cookies’ or ‘persistent cookies’. Your computer automatically removes session cookies once you close your browser. Persistent cookies will survive on your computer until an expiry date specified in the cookie itself is reached.
Cookie categories
We use the categorisation set out by the International Chamber of Commerce (ICC) in their UK Cookie Guide, produced in April 2012.
The guide identifies four categories of cookies, outlined below:
- Strictly necessary cookies: These cookies are essential for the user to move around the website and to use its features, e.g. shopping baskets and e-billing.
- Performance cookies: These cookies collect information about how the user makes use of the site, e.g. which pages the user visits most. These cookies do not collect information that identifies the user.
- Functionality cookies: These cookies remember choices made by the user and enhance the features, e.g. language or users location.This cookie is also used to remember a user’s preferences for a font size, or customisable parts of a web page.
- Targeting or advertising cookies: These cookies collect information about the users’ browsing habits. This may also include links to social media sites, e.g. Facebook, etc.
Your rights
You have the right to choose whether to accept these cookies. You can exercise this right by amending or setting the controls on your browser to reflect your cookie preferences.
However, please note that if you choose to refuse cookies you may not be able to use the full functionality of our website.
Changing your cookie preferences
The “Help” menu in the toolbar of most web browsers will tell you how to change your browser’s cookie settings, including how to have the browser notify you when you receive a new cookie, and how to disable cookies altogether.
You may also like to visit www.aboutcookies.org for comprehensive information on what cookies are, how to delete them, and how to adjust your browser preferences.
Questions
If you have any questions regarding this privacy policy or its application, please email us at info@londondecom.org.