Croydon Climate Action (CCA) is currently an unincorporated organisation.
We are not required to appoint a DPO, but you can contact us about data protection matters at firstname.lastname@example.org.
We process the personal data of our members, supporters, subscribers to our mailing list, participants in our meetings and online events, and local politicians, officials, business people, community leaders and others we wish to influence.
Member data is processed under GDPR basis Art.6(1)(b) as necessary to enter into and support a contract, i.e. the terms of membership. Names, contact details, opinions, skills and other biographical details are used so that members can work with each other, our supporters and those we wish to influence to further the aims of the CCA. Data may be recorded in CCA documents, emails and digital messages, in meeting minutes and strategic plans, on the CCA website, in the CCA newsletter and elsewhere as necessary for this purpose.
Member data will be retained for six years after membership ends.
Supporters - including subscribers to the mailing list and volunteers
Supporter data will be processed with the person’s consent under GDPR Art.6(1)(a) as collected when signing up for our newsletter, to register with us as a volunteer, or as evidenced by signing into an online meeting or event, or by contacting CCA and volunteering their data to us.
The newsletter is classed as direct marketing under the Privacy and Electronic Communications regulation (PECR). If a supporter consents to this by signing up, they will only receive communications from CCA about our activities, and their details will not be shared with other organisations or used for other marketing purposes.
Consent can be withdrawn at any time by contacting email@example.com or by unsubscribing from our newsletter, after which time the relevant personal data will be deleted or anonymised within 30 days. If consent is not withdrawn, personal data of supporters, subscribers or volunteers may be retained for up to three years from the time of their last interaction with CCA.
If supporters give additional consent for CCA to do so at the time of registration, their data as a volunteer will be made accessible to other member organisations of the Croydon Green Network who share our goals.
Others - including local politicians, officials, business people and community leaders
Personal data about others is collected from publicly available sources such as websites or passed to us by supporters. We may record names, contact details, details of their current role and professional background, as well as examples of people’s previous actions or statements relating to climate action from the public record, as well as member and/or support opinion of the person’s level of engagement with the CCA, other related community groups or the subject of climate change more broadly, as well as possible ways to improve engagement and persuade them to take positive action against climate change in their professional capacity. This is processed under GDPR Art.6(1)(f) ‘legitimate interests’ to raise awareness of climate change and facilitate action on the part of influential people to combat it within our community.
This data will be retained as a record of our outreach for up to six years after the specific event, communication or other activity the data relates to. Contact details and role descriptions will be deleted within a year of the person ceasing in their role.
We use the following platforms to host and process personal data:
Google for document storage, forms and email
Zoom for web conferencing, recording and transcription
WhatsApp for group and direct messaging between members and supporters
Wix for web hosting
Under UK GDPR and the Data Protection Act you have the following rights:
The right to be informed – we tell you how we process your personal data in this notice, on forms and by request
The right of access – you can request a copy of the information we hold on you
The right to rectification – you can ask us to correct inaccurate information
The right to erasure – you can ask us to delete or anonymise information you provided under ‘consent’; or other information that is no longer necessary to fulfil the lawful basis of ‘contract’; or data we process under ‘legitimate interests’ where you object and we have no overriding legitimate interest to continue processing.
The right to restrict processing – you can ask us to restrict use of your data as an alternative to deletion or as a temporary measure
The right to data portability – you can ask us to transfer data you have provided us to another controller
The right to object – you can tell us if you object to our processing of your data
If you want to exercise these rights, please contact us at firstname.lastname@example.org. You will receive a response within one calendar month.
We do not engage in automated decision making or profiling.