DATA USE POLICY

THE CHRISTIAN HERITAGE CENTRE AT STONYHURST: DATA USE POLICY

  • THE CHRISTIAN HERITAGE CENTRE AT STONYHURST (“CHC”) – LAWFUL BASIS FOR DATA COLLECTION:

    Legitimate Interests (GDPR point (f) of Article 6(1)): the processing of your data is a vital part of the company as it allows us to contact you to provide you with relevant and important information regarding your enquiry or interest. 

  • HOW WILL THIS EFFECT YOU?

    We will use the provided details to contact you regarding your enquiry with important information and any details regarding a booking. If you have opted to subscribe to our periodic emails, you will also receive these in addition to any response to your initial enquiry.

  • WHO WILL MY DATA BE SHARED WITH?

    Data will only be held inside of the Christian Heritage Centre at Stonyhurst. No other 3rd party companies will be sent the data, however, users should be aware that the information will be stored on servers belonging to 3rd party companies, the security of which are maintained by that company and not the CHC. Therefore, that company are liable in the case of a data protection breach and not the CHC. We endeavour to ensure the security of our website to ensure the protection of your data. The security of emails containing data is the responsibility of the email service provider. If the security of our website is compromised, or if we receive notification from companies we use that their security may have been compromised and we suspect a data leak has occurred, we will contact all persons who may have been effected by the data leak.

  • HOW WILL MY DATA BE USED?

    Data will only be used for the purposes of contacting you in response to an enquiry or for the use of sending our periodic emails if the user has opted to receive these emails.

  • WHY IS MY DATA BEING COLLECTED?

    The data is required to respond to an enquiry, send further information or to complete a booking.

  • HOW IS MY DATA COLLECTED?

    Data is collected through our online contact forms. Data is not collected autonomously, (with exception to necessary cookies) and is not collected without the explicit permission of the person(s) involved.  

  • WHO IS COLLECTING MY DATA?

    The CHC collects and stores all data within our database, however files are stored on 3rd party company servers. 

     
  • YOUR INDIVIDUAL RIGHTS

    Under the GDPR you have the following rights:

  • the right to be informed;
  • the right of access;
  • the right to rectification;
  • the right to erasure;
  • the right to restrict processing;
  • the right to data portability;
  • the right to object; 
  • and the right not to be subject to automated decision-making including
    profiling.
  • The right to be informed guarantees that we will notify you at any point at which we will be gathering data from you, (i.e our online submission forms include a notification statement, as well as a check box which allows you to give permission for the data you have provided to be stored and used by us for the purposes of the business under our legitimate interests. However, as we only gather information vital to the response to the enquiry, we unfortunately cannot provide the user the right of individual consent for specific data points, (i.e we need you to give permission for all fields not just for your full Name for example) although there are some points which you are able to opt out of which are not notated with a star. 
  • The right of access gives you the right to access any data that we hold on you at any time. If you wish to find out what data we currently store on you, don’t hesitate to send us an email and we will send back any relevant data we hold.
  • The right of rectification gives you the right to correct any incorrect data we hold on you. I.e if your name is incorrect, simply send us an email with a request to change it and we will update your data.
  • The right to erasure gives you the right to require us to delete any data we hold on you on your request. If you wish us to remove any data we hold on you, send us a request via email and we will delete all data relevant to you.
  • The right to restrict processing allows you the right to restrict what data we collect on you. However, in the case of the CHC, it is deemed that the collected data is a targeted and proportionate way of achieving the purpose of allowing the user to be contacted for the purposes of the business. Therefore, we require all data that we request to be processed and unfortunately, as we cannot contact you without it, you will not be able to submit an enquiry without giving permission for the processing of all data requested.
  • The right to data portability gives you the right to obtain and reuse your personal data for your own purposes across different services. It allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without effecting its usability. This right only applies to information you have provided. Simply email us a request.
  • The right to object gives you the right to object to us gathering your data. At the end of all our submission forms we include a check box for this purpose, if you wish to object to the gathering of your data, simply leave the check box unchecked and none of the data you have entered will be stored. It will, however, not allow you to submit your application.
  • The right not to be subject to automated decision-making including profiling gives you the right to not be subject to decisions solely made by automated means without any human involvement (automated decision-making), and to not be subject to automated processing of personal data to evaluate certain things about an you (profiling). The CHC does not undertake either of these practices and so users will not be subject to either.
  • Finally, if you have any other questions about the use of your data, or if you feel we are not satisfying our data protection responsibilities, please don’t hesitate to contact us at: [email protected].

  Thank You.