The General Data Protection Regulation (GDPR) is a privacy law designed to strengthen and unify data protection for UK and EU residents.
Below is our detailed privacy statement information on how we manage, process and store your data.
We collect information about you or your organisation when you use the Exeter Community Centre website, e-mail and customer reception services. We only collect information which is necessary, relevant and adequate for the purpose you are providing it for. The information we collect includes some or all of the following:
Name (including title);
The pages you visited on our website and how long you visited us for;
Your IP address;
The internet browser and devices you are using;
Any information within e-mail or letter correspondence you send to us.
Exeter Community Centre will only process information that is necessary for the purpose for which it has been collected. You will always have the option not to receive marketing communications from us (and you can withdraw your consent or object at any time). We will never send you unsolicited ‘junk’ email or communications, or share your personal information with anyone else who might.
There are various ways in which we may use or process your personal information. We list these below:
Where you have provided your consent, we may use and process your information to contact you from time to time about promotions, events, activities or information which we think may be of interest to you;
You can withdraw your consent at any time by contacting us on the details provided within the 'How can you manage the information we hold about you' section below or, in relation to any marketing messages you receive, by using the unsubscribe option included in those messages.
We may use and process your personal information where this is necessary to perform a contract with you and to fulfil and complete your booking orders entered into with us.
We may use and process your personal information as set out below where it is necessary for us to carry out activities for which it is in our legitimate interests as a business to do so.
Processing necessary for us to support customers with sales and other enquiries
Sometimes we will need to process your personal information to contact you if belongings have been left in the building and we need to tell you about it.
We do not share or sell your information to third parties.
However, for the purposes of supporting the ongoing development and upkeep of the Exeter Community Centre we may share an aggregation of information to funding organisations. We anonymise information or use aggregated non-specific data sets wherever possible. Your information is stored within the EU, on secure ISO 27001 accredited UK based servers.
We will not hold your personal information in an identifiable format for any longer than is necessary. If you are a customer we will hold personal information about you for a longer period than if you provided your details in connection with a prospective relationship.
If we have a relationship with you (i.e you are a customer or have made a booking enquiry), we hold your personal information for 6 years from either the date of payment for the last booking or 4 years from the last booking enquiry. We hold your personal information for this period in order to provide continuity in customer service should you wish to renew the relationship.
The only exceptions to the periods mentioned above are where:
The law requires us to hold your personal information for a longer period, or delete it sooner;
You exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law (see further 'How can you manage the information we hold about you');
You have the right as an individual to access your personal information we hold about you and make corrections if necessary. You also have the right to withdraw any consent you have previously given us and ask us to erase information we hold about you. You can also object to us using your personal information (where we rely on our business interests to process and use your personal information).
You have a number of rights in relation to your personal information under data protection law. In relation to most rights, we will ask you for information to confirm your identity and, where applicable, to help us search for your personal information. Except in rare cases, we will respond to you within 30 days after we have received any request (including any identification documents requested).
You have the right to:
You can exercise the above rights and/or manage your information by contacting us using the details below:
Post: Exeter Community Centre, 17 St David's Hill, Exeter, EX4 3RG
Phone: 01392 420549
If you have any specific data protection concerns or a complaint, you can address it to our Data Protection Officer at firstname.lastname@example.org
If you are unhappy, you have the right to lodge a complaint with a data protection regulator in Europe, in particular in a country you work or live or where your legal rights have been infringed. The contact details for the Information Commissioner’s Office, the data protection regulator in the UK, are below:
Post: Information Commissioner's Office
Call: 0303 123 1113