The National Lottery Community Fund Privacy Notice - (VCSE Strengthchecker)
Voluntary, Community and Social Enterprise (VCSE) organisations make a vital contribution to society. We know though that many value structured support to plan effectively, when it comes to prioritising the strengths they need to build on most for their development and growth.
We aim to help these organisations across civil society to become more resilient, so that they can continue to support their beneficiaries in future years.
As part of that, The National Lottery Community Fund are offering all VCSEs an opportunity to reflect on their organisational strengths and position and to identify areas that could be developed to improve organisational strength through this diagnostic tool, the VCSE Strengthchecker. It is not linked to the National Lottery Community Fund’s application process and it is completely free to use.
This Privacy Notice explains your rights and gives you the information you are entitled to under the Data Protection Act 2018 and the General Data Protection Regulation (“the Data Protection Legislation”). Note that this section only refers to your personal data which we process (e.g. the details of individuals at your organisation - name, address, email address).
Who controls the information you provide?
For the purposes of the General Data Protection Regulation (GDPR) the National Lottery Community Fund is the data controller of the personal information you have provided to us.
The VCSE Strengthchecker is managed by the National Lottery Community Fund as part of our work to support organisation development within the VCSE sector. We control why and how your personal data is processed for the purposes of the VCSE Strengthchecker.
We are responsible for compliance with data protection laws in respect of the elements of the processing we undertake.
This privacy notice is issued on behalf of the National Lottery Community Fund.
Creative Coop provide hosting and maintenance services for the VCSE Strengthchecker and process the information you provide on behalf of The National Lottery Community Fund to enable you to access and use the VCSE Strengthchecker website.
Why are we collecting and processing your personal data?
The personal data we process are the details of a legally responsible individual at your organisation - name, address, email address, phone. This is processed by the the National Lottery Community Fund in order for you to be able to register on the VCSE Strengthchecker site eand save your answers and come back to your answers.
Our legal basis for processing your personal data
The National Lottery Community Fund is processing your personal data as it is necessary for a task carried out in the public interest, and this personal data is being processed on our behalf by Creative Coop.
Who will we share your personal data with?
The National Lottery Community Fund hold the details outlined above has Creative Coop act as our data processor. Our data processor will be able to access your email address to enable them to communicate with you regarding the VCSE Strengthchecker.
Your personal data can also be accessed by the organisation that provides hosting and maintenance services for the VCSE Strengthchecker website, Creative Coop. There are no sub-processors and your data will not be transferred to any third parties.
By submitting information into the VCSE Strengthchecker website, you agree to the (non-personal) data you provide potentially being published for use by third parties, including contracted evaluators and other funders for the purposes of furthering understanding of the voluntary, community and sector, and of interventions to support it. Any data that is shared with third parties will be in anonymous form and all necessary steps will be taken to ensure you or your organisation will not be identifiable. No personal data will be shared with third parties.
How long will we keep your personal data?
Your personal data will be retained for 6 years after the duration of the VCSE Strengthchecker. There may be the option to transfer your data over to a new strenghchecker tool in 2020/21, we will ask for your consent prior to any transfer. If your consent is not provided we will delete your account and all of your data within four weeks.
If you do decide to transfer your registered account and data to the new strengthchecker tool, we will automatically delete your account if it has not been accessed for a period of 2 years or more.
Your rights, e.g. access, rectification, erasure
The data we are collecting is personal data, and you have rights that affect what happens to it. You have the right to:
- see what data we have about you;
- ask us to stop using your data, but keep it on record;
- ask us to stop using and delete your data in certain circumstances;
- have all or some of your data corrected;
- complain with the Independent Information Commissioner’s Office (ICO)(see below).
You can contact the ICO at https://ico.org.uk/, or telephone 0303 123 1113. ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
If you have any questions, queries or complaints, and to exercise your personal data rights, please in the first instance contact the Data Protection Officer at data.protection@tnlcommunityfund.org.uk or by writing to the Data Protection Officer at The National Lottery Community Fund, Apex House, 3 Embassy Drive, Birmingham, B15 1TR.
You can contact the Information Commissioner’s Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Accuracy
The National Lottery Community Fund take all reasonable steps to keep personal data in its possession or control, which is used on an on-going basis, accurate, complete, current and relevant, based on the most recent information available to us. If we are advised of a change in information, we will update the data accordingly.
We rely on you to notify us of any changes to your personal data.
Your personal data will not be sent overseas and will not be used for automated decision making.
Security of personal information
We are committed to taking all reasonable and appropriate steps to protect the personal information we collect from you from improper use or disclosure, unauthorised access, unauthorised modification, and unlawful destruction or accidental loss. We have taken and will take appropriate information security, technical, storage and organisational measures to such end, including measures to deal with any suspected data breach. All providers who are associated with the processing of your information are obliged to respect the confidentiality of your personal data.