Budleigh Film Society (“BFS”) Data Privacy Policy
9 September 2018
About this Policy
This policy explains when and why we (i.e. BFS) collect personal information about our members, how we use it, how we keep it secure and your legal rights in relation to it. We reserve the right to amend this Data Privacy Policy from time to time without prior notice. You are advised to check our website (www.budleighfilm.org.uk) regularly for any amendments. We will always comply with the General Data Protection Regulation (“GDPR”) when dealing with your personal data. For the purposes of the GDPR, BFS will be the “controller” of all personal data we hold about you.
What information we collect and why
BFS collects the name, address, telephone number(s) and email address from a person when they apply to join or renew their annual membership. The purpose is to manage the member’s membership of BFS (e.g. to send programme brochures) and to contact members to keep them updated about BFS activities. The lawful basis of processing is Consent which is sought when the member applies for membership and can be withdrawn at any time by contacting BFS in writing.
How we protect your personal data
We have implemented generally accepted standards of technology and operational security in order to protect personal data from loss, misuse, or unauthorised alteration or destruction. For any payments which we take from you online we will use a recognised online secure payment system. Please note that internet transmissions in any form can never be guaranteed to be 100% secure. We will notify you promptly in the event of any breach of your personal data which might expose you to serious risk.
Who else has access to the information you provide us?
We will never sell your personal data nor will we share it with any third parties, except where required to do so by law.
How long do we keep your information?
We will hold your personal data on our systems for as long as you are a member of BFS and for as long afterwards as is necessary to comply with our legal obligations. We will review your personal data every year to establish whether we are still entitled to process it. If we decide that we are not entitled to do so, we will stop processing your personal data other than retaining it in an archived form in order to be able to comply with future legal obligations (e.g. compliance with tax requirements and exemptions). We securely destroy all financial information once we have used it and no longer need it.
Cookies
This website may use cookies to personalise content and to analyse web traffic. You consent to these website cookies if you continue to use our website. You are able to disable the use of cookies for this website in your browser settings.
You have rights under the GDPR to:
- access your personal data
- be provided with information about how your personal data is processed
- have your personal data corrected
- have your personal data erased in certain circumstances
- object to or restrict how your personal data is processed
- have your personal data transferred to yourself or to another business in certain circumstances.
We can be contacted by calling: Stephen Huyshe-Shires (Membership Secretary) on 01395 597454.
You have the right to take any complaints about how we process your personal data to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.