What is GDPR and how does it affect you?
The General Data Protection Regulation (GDPR) supercedes the Data Protection Directive. It is a regulation in European Union (EU) law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the export of personal data outside the EU and European Economic Area (EEA) . The GDPR aims primarily to give control to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU. The regulation applies to both the Data Controller (an organisation that collects data from EU residents), or a Data Processor (an organisation that processes data on behalf of a data controller, for example a payment gateway).
According to the European Commission, "personal data is any information relating to an individual, whether it relates to his or her private, professional or public life. It can be anything from a name, a home address, a photo, an email address, bank details, posts on social networking websites, medical information, or a computer's Internet Protocol (IP) address.
Art Craft Finder collects and processes Personal Data belonging to their members. Membership of Art Craft Finder will be initiated following a formal online registration and verification process. This information is used directly to create an online profile of the member's business or organistaion within a public search directory. This includes the following data;
A directory listing can either be created directly by a member via their own registered account or alternatively the member can request / agree that Art Craft Finder creates a listing on their behalf. If the latter, the member is giving consent for Art Craft Finder to use information supplied by them or selected from their online information sources (e.g. website, social media pages or other media communication).
Art Craft Finder also keep a log of all their website pages visited by a public user which includes the following data;
This information is used by Art Craft Finder solely for the purposes of website development, improving user experience and gathering of marketing information. Marketing data is used solely for the development of the Art Craft Finder business and also for relaying analytics to it's members listings. This information will never be given to third parties without the consent of the owner.
Data Protection Office
Art Craft Finder has established a Data Protection Office to ensure its compliance with Data Protection Laws. In addition, The Data Protection Office will act as Art Craft Finder's contact point with our Members and our Supervisory Authority.
The Data Protection Office can be contacted by post to: Art Craft Finder, 10 Stewart Road, Kelty, Fife, KY4 0GY. By telephone on 01383 229483 or by email to firstname.lastname@example.org.
Art Craft Finder collect and process Personal Data belonging to Members.
How Does Art Craft Finder Protect Your Personal Data?
In order to protect your privacy, Art Craft Finder has implemented stringent Information Security and Personal Data Protection Policies. Art Craft Finder Employees and Associates who come into contact with your Personal Data have obligations to adhere to our policies, and are regularly trained in security and privacy best practice.
Art Craft Finder apply appropriate technical measures in order to protect data, computing devices and our local network from accidental, malicious activities or theft. All data that Art Craft Finder collects from you is stored on servers inside the EEA. This data is stored within a remote database located at a state-of-the-art UK data centre which is manned 24/7 and includes high-level physical security measures. Data is added, edited and deleted using a browser protected by SSL. SSL (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral.
Data Protection Laws, describe individuals who have provided their Personal Data to an organisation (either directly or indirectly) as
Data Subjects. As a Data Subject, you have a number of rights with respect to how organisations process your Personal Data.
If you wish to exercise any of your rights, please contact Art Craft Finders's Data Protection Office (telephone: 01383 229483 or by email to email@example.com).
Right To Be Informed
As a Data Subject, you have the right to be informed of the use that your Personal Data will be put to, along with details of the Data Controller and your rights.
Where you provide your Personal Data directly to Art Craft Finder, these details will be made available at the time your data is obtained.
Where Art Craft Finder obtains your Personal Data from a third party, these details will be made available within a reasonable period of having obtained the data. If your Personal Data is to be used to communicate with you, these details will be provided at the latest, when the first communication takes place. If disclosure to another recipient is envisaged, these details will be provided at the latest, before the data is disclosed. In all cases, notification will take place, within one month of receipt of your Personal Data.
Right To Access
Data Subjects have the right to access and obtain a copy of your Personal Data held and processed by Art Craft Finder, on request.
You exercise this right through the submission of a formal, written Subject Access Request to Art Craft Finder's Data Protection Office (email: firstname.lastname@example.org or Data Protection Office, Art Craft Finder, 10 Stewart Road, Kelty, Fife, KY4 0GY).
Right To Rectification
You have the right to request Art Craft Finder to correct inaccurate or incomplete Personal Data.
Right To Erasure (To Be Forgotten)
You have the right to request Art Craft Finder to erase your Personal Data from its systems and records. If you no longer wish to be a member or no longer subscribe to be a member of Art Craft Finder, any data or directory listing data will be permanently deleted from our system.
Right To Restrict Processing
Data Subjects have the right to request Art Craft Finder to stop or restrict the processing of your Personal Data. This could be for example, if your Personal Data is no longer necessary for the purpose of processing.
Right To data portability
You have the right to request a copy of the Personal Data which you have provided directly to Art Craft Finder, which is automatically processed in a portable format.
Right To object
As a Data Subject, you have the right to object to the processing of your Personal Data, where Art Craft Finder relies upon Legitimate Interest as the lawful basis for processing.
If you are unhappy with how your Personal Data is processed by Art Craft Finder, you have the right to complain to the Data Protection Office. If you remain unhappy, following Art Craft Finder's response to your complaint, you have the right to lodge a further compliant with The Information Commissioners Office (ICO). The ICO are the General Data Protection Regulation (GDRP) UK representative within the EEA.
The ICO's address is: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow Cheshire, SK9 5AF. You can also contact them by telephone on 01625 545745 or via their website at www.ico.org.uk.