This policy explains what types of personal information will be gathered when you visit the UK Websites, and how this information will be used. Please note that this policy applies to the 2-3 Degrees website. If you follow a link to any other website from our website, please check their policies before you submit any personal information to those websites.
2-3 Degrees takes your privacy seriously. This policy outlines the use of personal data under the Data Protection Act 2018 and the General Data Protection Regulations (“GDPR”) For the purpose of DPA and GDPR 2-3 Degrees are the data controller and any enquiry regarding the collection or processing of your data should be addressed to 2-3 Degrees Data Protection Officer c/o 2-3 Degrees, 79-81 The Ministry, Borough Road, London, SE1 1DN.
Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone, or in conjunction with any other information in the data controller’s possession, or likely to come into their possession.
Information We Collect
Personal information includes identifiers such as; your name, date of birth, email address, postal address, telephone number, as well as information you provide in any communications between us. You will have given us some or all of this information through:
When you visit our website, we collect information to help us to understand how our stakeholders use the site. This information consists of your IP address, your internet browser, the time and date of when you visited and which pages you visited or downloaded. We cannot use this information to find out further personal information about you, but simply allows us to make improvements and tailor our offer to our stakeholders.
We aim to ensure that our communications to you are relevant and timely. To enable us to do this, we may also analyse publicly available geographic, demographic and other information relating to you, to better understand your interests and preferences.
How the Information Collected is Used
2-3 Degrees complies with its obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We will process your personal data based on your consent, and/or because we need to use it in order to fulfil a contract with you (e.g. because you have subscribed to our membership, engaged with our programmes and/or legitimate interest).
Legitimate interest means there is a valid reason for 2-3 Degrees to do so. This could include; making improvements to our services, to manage relationships with our supporters and to comply with relevant legislation. Whenever we process your information in this way, we ensure that we consider your rights and interests.
We will never sell or swap your details.
We use your personal data for the following purposes:
Personal information provided to the 2-3 Degrees by you will only be used for the purposes stated when the information is requested. Personal information will not be sold to third parties, or provided to direct marketing companies or other such organisations without your permission.
Protecting Children and Young People
Where we believe any of our services may attract children and young people under the age of 16, we will clearly provide information notices to encourage children to get parent or guardian consent before sharing their personal data.
We actively encourage all our staff, whenever they are implementing new initiatives to assess whether these might be attractive to children and young people and if so, will ensure clear information is provided to try and deter children and young people from providing their personal data without parent or guardian consent.
If you are a parent or guardian and are concerned that we may be processing personal data related to your child, please email info@2-3degrees, subject heading “Data protection” or write to the Data Protection Officer – Azzees Minott, c/o 2-3 Degrees, 79-81 The Ministry, Borough Road, London, SE1 1DN.
How we Store Information Collected
As part of the services offered to you, for example through our websites, the information you provide to us may be transferred to and stored in countries outside of the European Economic Area (EEA) as we use remote website server hosts to provide the website and some aspects of our service, which may be based outside of the EEA, or use servers based outside of the EEA – this is generally the nature of data stored in “the Cloud”.
We do not use or disclose sensitive personal data, such as race, religion, or political affiliations, without your explicit consent.
We will process, disclose or share your personal data only if required to do so by law, or in good faith believe that such action is necessary to comply with legal requirements, or legal process served on us or our websites.
You have the right to opt out of us processing your personal data for marketing purposes by contacting us via email at firstname.lastname@example.org
The transmission of information via the Internet or email is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of data while you are transmitting it to our site; any such transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.
The Use of Trusted Partners and Suppliers
We use external companies such as Eventbrite and Survey Monkey to collect or process personal data on our behalf. We undertake checks on these companies before we work with them and put agreements in place that require them to comply with data protection legislation and ensure that they have appropriate controls in place to secure your information.
How we use “Cookies”
Most of our web pages use “cookies”. A cookie is a small file of letters and numbers that we place on your computer or mobile device if you agree. These cookies allow us to distinguish you from other users of our websites, which helps us to provide you with a good experience when you browse our websites and also allow us to improve our websites.
Your Rights and Your Personal Data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
If we wish to use your personal data for a new purpose, not covered by your consent, then prior to commencing the processing we will provide you with a new notice setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
Controlling the use of Your Data
If you have given us consent to use your data for a purpose you can revoke or vary that consent at any time. If you do not want us to use your data, or want to vary the consent that you have provided you can email info@2-3degrees, subject heading “Data protection” or write to the Data Protection Officer, c/o 2-3 Degrees, 79-81 The Ministry, Borough Road, London, SE1 1DN.
If you are concerned about how your information is used, you should check this page periodically.
To exercise all relevant rights, queries of complaints please in the first instance contact our data controller and Data Protection Officer by emailing dinfo@2-3degrees, subject heading “Data protection” or write to the Data Protection Officer, c/o 2-3 Degrees, 79-81 The Ministry, Borough Road, London, SE1 1DN. You can contact the Information Commissioner’s Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at email@example.com if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at firstname.lastname@example.org
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk