Scottish Castles Association

The Scottish Castles Association (SCA) Data Protection Privacy Statement

Personal Data relates to a living individual who can be identified from that data, either by that data alone or in conjunction with any other data held or likely to be held by a data controller. The processing of such data is governed by the General Data Protection Regulation (GDPR).

The SCA will comply with the GDPR by keeping personal data current; by storing and destroying it securely; by keeping data to a minimum; and by ensuring that appropriate and sufficient measures are in place to protect such data from loss, misuse, unauthorised access and disclosure.

The SCA will use your data for the following purposes:

• To administer membership records;

• To maintain accounts and records;

• To notify you of news and upcoming trips and other events;

• To share your contact details with Council members, if you are elected to the Council.

The legal basis for processing your data rests with your explicit consent. We need the data to keep you informed of news and events via email, telephone or post. We also need this data to maintain accurate records for accounting purposes. Access to the data is restricted to those who need to be involved, and will only be used for genuine and legitimate reasons, and not to harm any of your rights or interests.

Sharing data. Your personal data is shared only within Council, if you have been elected to serve on the Council. We do not as a rule share your data with anyone outside the SCA. The only exception to this would be if we were required to comply with a court order or other legal obligation, or where the data is requested by government or law enforcement authorities, to enforce any agreements or protect the rights property or safety of members or others.

Personal Data is kept whilst it is still current and for one year after membership lapses. Gift Aid declarations are kept for seven years after the tax year to which they relate. The data is held on a secure website by our Website Manager, with access restricted by password protection to those who need to know.

You have the right under GDPR to:

• Request a copy of your personal data which the SCA holds about you;

• Request that the SCA corrects any personal data if it is inaccurate or out-of-date;

• Request that your personal data is no longer necessary for the SCA to retain it;

• Request that the SCA provide you or a third party of your choice with the data we hold on you;

• Lodge a complaint with the Information Commissioner's Office.

Access requests will be replied to within 30 days.

Change of Purpose. Should the SCA wish to use your data for a new purpose not covered by this statement, we would provide you with a new statement explaining this use prior to the change, and setting out the changes. Where necessary, we will seek your prior consent to implementing the changes.

Contact Details

If you wish to exercise your rights, or have any queries or complaints, you should contact the SCA at accounts@scottishcastlesassociation.com or telephone 01466 711190.

If you are not satisfied with our response to your concern(s), you can contact the Information Commissioner's Office (Scotland) at Scotland@ico.org.uk or telephone 0303 123 1115, or by post at The Information Commissioner's Office - Scotland, 45 Melville Street, Edinburgh, EH3 7HL.