Bristol Cycling Campaign is committed to protecting the data privacy of individuals it works with. This policy sets out how we will handle your data (where you provide it) and how you can raise any concerns with us or the regulator. We aim to carry out all our activities in line with the six data protection principles outlined in the Data Protection Act 2018, the UK implementation of the General Data Protection Regulation (GDPR). Following these any personal data will be:
- used fairly, lawfully and transparently
- used for specified, explicit purposes
- used in a way that is adequate, relevant and limited to only what is necessary
- accurate and, where necessary, kept up to date
- kept for no longer than is necessary
- handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage
Personal data, or personal information, means any information about an individual from which that person can be identified. You can find out more about personal data from the Information Commissioner’s Office.
As such we aim to limit the amount of data that is collected on individuals to that which is strictly necessary for the purposes of our campaign activities and limit access to personal data to those carrying out processing.
We respect your privacy and are committed to protecting your personal data. This policy explains how we manage the personal information of users of Bristol Cycling Campaign’s website.
This website bristolcycling.org.uk is owned by Bristol Cycling Campaign (the data controller) and provides visitors with anonymous access. You can access and browse our website without disclosing your personal data. However, our site requires registration for certain services for which you will be required to provide personal data.
Specific use of personal data
This section summarises any circumstances in which we may collect personal data about you, the legal basis of processing and how long we hold it. We may collect, use, store and transfer different kinds of personal data about you as follows:
- Visiting our website: We collect only those personal data which your browser transmits to our server. If you visit our website, we collect the data below which are technically necessary for us to show you our website and ensure its stability and security, including: IP address, date and time of your inquiry, content of the request (actual page), website from which the request is received, browser, operating system and its interface, language and version of the browser software. We use Google Analytics
- Registering on our website: If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed. If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
- If you sign up to support Bristol Cycling Campaign and subscribe to our mailing list: We add your email address, name, address and postcode to our supporter management system. Supporters are also generally added to our newsletter mailing list (through MailChimp). We do this on the basis of our legitimate interest but you can always opt out of this. We will hold your data only while necessary and archive regularly.
- If you make a donation: Your name, payment and security details are held by the payment processor (through PayPal). Your name, email address, postal address, and the donation amount are then made available to us. We do not use this data for purposes other than processing your donation, and accounting. The basis of processing is our legitimate interest.
- If you contact us via email or you provide contact details via other means: Your email address, message, and phone number if included, will be accessible to our small team and may be forwarded to the person or people in the organisation best equipped to respond. The basis of processing is our legitimate interest.
- If you sign up to our events: Your name, email address, address, and event preferences. The basis for processing is our legitimate interest.
- If you take part in any Bristol Cycling Campaign online research or consultations via our website or social media we may collect personal data directly, or through Google Forms or SurveyMonkey. The purposes for these will be specified in the context of the individual survey or consultation concerned. The basis of processing is our legitimate interest.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
We do not collect or use personal data for any purpose other than those indicated at the time your personal data is volunteered.
Security and encryption
Bristol Cycling Campaign takes appropriate measures to ensure we keep your information secure, accurate and up to date. We also take care to ensure that we have secure systems for processing payments through our payment services provider (PayPal).
We take great care to ensure that our websites operate at the highest security levels, using industry standard secure server software (SSL) and that our suppliers are committed to best practice in digital security. We do not handle or store any bank or card details. All financial data is encrypted in transmission. However, the security of data transmission via the Internet can never be 100% guaranteed, and the data transmission is at your own risk.
We have implemented security policies, rules and technical measures to protect the personal data that we have under our control from unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss. Any persons and data processors, who have access to, and are associated with the processing of personal data, are obliged to respect the confidentiality of our visitors’ personal data.
We ensure that your personal data will not be disclosed to other institutions and authorities except if required by law or other regulation or unless we have already sought your consent.
Sharing your information with other organisations
Bristol Cycling Campaign will not sell your information to any third party. We may share your information with third parties where we have a legal duty to do so, to provide you with the information or service you have asked for, or where you have given explicit permission for us to do so. Where we do use a third-party provider, we will ensure we have contracts in place to ensure they are obligated to treat personal data in compliance with the Data Protection Act 2018 and ensure privacy, confidentiality, and non-disclosure to any other parties.
Your right to access and other rights
You may contact us at any time to ask to see what personal data we hold about you. Please contact us to request this. Although we may require you to provide proof of your identity in advance, we will aim to respond to your request within one month and we will provide the information without any charge. Under certain circumstances you may have the data erased, rectified, amended, or completed. Under certain circumstances you may also object to our processing your personal data and restrict our processing of your personal data.
Your right to erasure
You may request that we destroy the personal data that we hold about you, provided that there is no legitimate reason for us continuing to hold it. Please contact us to request this.
How to unsubscribe from the newsletter
Every newsletter contains a quick and easy unsubscribe link in its footer. When you unsubscribe from a newsletter managed via Mailchimp, your details remain on the list of past recipients, as well as on our CRM system. This is a measure to prevent circumstances such as a member of staff accidentally manually re-adding you. Mailchimp states: “As a compliance measure, subscribers who unsubscribe themselves can’t be deleted from your list.” However, provided you are still a subscriber at the point when you contact us, on request your details can be permanently removed from the list – please get in touch if you would like this to happen.
Your right to complain
If you believe that we have mishandled your data, you have the right to lodge a complaint with the Information Commissioner’s Office. You can report a concern here (but do contact us first, so that we can try and help).
- Data Protection Act 2018
- The General Data Protection Regulations 2016/679
- UK Privacy and Electronic Communications
Bristol Cycling Campaign, c/o 13 Alpha Rd, Bristol BS3 1DH
Bristol Cycle Campaign, a membership group entirely run by volunteers and supporters.