Derby Telugu Association UK

Data Protection and Privacy Policy

This document outlines how Derby Telugu Association processes and manages personal data and:

  • Identifies the data controller.
  • Explains the lawful basis for processing personal data.
  • Outlines the personal data held and processed.
  • Outlines the scope of the special category personal data held and processed.
  • Outlines the process of Subject Access Requests.

1. Data Controller

The Data Controller is Derby Telugu Association.

2. Contact

If you have any questions about this policy or for more information about how we use your data or would like to exercise any of your rights, contact Derby Telugu Association.

3. Lawful Basis for Processing

All processing is carried out by consent or under the legitimate interest of Derby Telugu Association, or public interest. These cover processing for community engagement, cultural activities, and communication. Where processed under the lawful basis of a task carried out in the public interest, it is to support or promote cultural and community engagement.

4. Data Sources

Data held is that provided by you when you contact us, and from correspondence with third parties in response to cases or inquiries you may raise. We may also hold data that you provide when we contact you, such as participation in surveys or events. If you do not wish to be contacted by telephone, please do not provide that information. Data may also be derived from publicly available sources for outreach purposes.

5. Data Security

Personal data is stored electronically and securely. We ensure that our service providers comply with the same high standards that we do, and we store our data on secure servers in the UK.

6. Special Category Data

Special category data will be processed under the lawful basis indicated in section 3, in accordance with the Data Protection Act and as permitted for cultural or community purposes.

7. Transferring Your Data Outside the EEA

If necessary, your data may be transferred outside of the European Economic Area (EEA) to service providers located in other countries. We will ensure your data is protected in the same way as within the EEA, and this will only occur with your consent or through legally approved safeguards, such as contractual clauses ensuring the same data protection standards.

We will use one of the following safeguards to ensure this:

  • Where the European Commission has issued an adequacy decision determining that a non-EEA country or organisation ensures an adequate level of data protection.
  • A contract is put in place with the recipient of the data obliging them to protect the data to the same standards as the EEA.

Legally, it is not permitted to transfer certain types of data, such as Electoral Register Data, outside of the EEA, and we honour that obligation.

8. Data Retention Policy

Personal data will be held for no longer than necessary. Typically, the maximum retention is two years unless required for ongoing community activities or legal obligations. Data will be reviewed at regular intervals to determine whether it should be kept or securely disposed of.

9. Subject Access Requests

We will verify the identity of anyone making a request to access their data. Once verified, we will respond within one calendar month. A log of Subject Access Requests will be maintained, including identifying details, for compliance purposes.

Data subjects have the right to the following:

  • To be told whether your personal data is being processed
  • To be given a description of the personal data, the reasons it is being processed, and whether it will be given to other organisations or people.
  • To be given a copy of the information comprising the data, and given details of the source of the data where this is available.

10. Sharing Your Data

If you have contacted us about a personal or community issue, your data may be passed on to a third-party in the course of dealing with your inquiry, such as local authorities, community organizations, or other public bodies. Any third parties that we may share your data with are obliged to keep your details securely, and to use them only for the basis upon which they were originally intended.

We may need to share your data with a third party, such as the police, if required to do so by law.

Unless otherwise specified, data may also be shared with entities of community associations or cultural groups in order to assist you or maintain contact with you in support of cultural engagement.

Your personal data is only used as outlined here and within your reasonable expectations based on the nature of the communication, and recognizing the need for community-related engagement in wider support of cultural activities.

11. Data Rights

You have the following rights:

  • Right of access – you have the right to request a copy of the information held about you.
  • Right of rectification – you have a right to correct data held about you that is inaccurate or incomplete.
  • Right to be forgotten – in certain circumstances you can ask for the data held about you to be erased from our records.
  • Right to object – you have the right to object to certain types of processing, such as direct marketing.
  • Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
  • Right to judicial review: if our office refuses your request, we will provide you with a reason why. You have the right to complain.

12. Making a Complaint

If you are unhappy with the way that we have processed or handled your data, you have a right to complain to the Information Commissioner’s Office (ICO). The ICO is the supervisory body authorised by the Data Protection Act 2018 to regulate the handling of personal data within the United Kingdom. The contact details for the ICO are:

Information Commissioner’s Office,
Wycliffe House, Water Lane,
Wilmslow, SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/concerns

If you have any questions about the data held, please contact Derby Telugu Association via the contact information on this website.

Please note that proof of identity is required should you choose to exercise any of the above rights in relation to personal data.

This website itself is supported technically by Derby Telugu Association Website Services, who share a Privacy Policy with the Association that can be found here: www.conservatives.com/privacy

We retain the right to update this policy at any time. If there are changes that significantly impact your rights, we will contact you in advance.

From time to time, other website developers copy this Privacy Policy for use on their own websites. This Privacy Policy applies exclusively to the ways in which data is collected, hosted, and used on genuine Derby Telugu Association websites and is not valid on other platforms, websites, or servers. We have no control over website developers who copy this Privacy Policy for their own purposes, which is a breach of copyright. However, if you are reading this on a genuine Derby Telugu Association website, you will see 'Powered by Derby Telugu Association' at the bottom of the footer.