Privacy Policy

Introduction

West Sussex Conservative Group is committed to protecting your privacy and ensuring that your personal information is handled responsibly. This policy outlines how we process and manage personal data collected through our informational website.

1. Data Controller

The Data Controller for the West Sussex Conservative Group is responsible for determining the purposes and means of processing your personal data.

2. Contact Information

If you have any questions about this policy, require more information about how we use your data, or would like to exercise any of your rights, please contact us: 
Email: duncan.crow@hotmail.com

3. Lawful Basis for Processing

We may process personal data under the following lawful bases:

  • Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as subscribing to newsletters or updates.
  • Legitimate Interests: Processing is necessary for our legitimate interests, provided these interests are not overridden by your rights and interests. This includes responding to enquiries and improving our website.

4. Data Sources

We collect data from the following sources:

  • Information you provide directly when contacting us through our website.
  • Automatic data collection through cookies and similar technologies when you visit our website.

5. Data Security

We store personal data electronically and securely. We ensure that our service providers comply with high standards of data protection and security. Measures include encryption, access controls, and regular security audits to safeguard your information.

6. Special Category Data

Given the nature of our website as an informational resource, we do not actively collect or process special category data.

7. Transferring Your Data Outside of the European Economic Area (EEA)

We do not transfer your personal data outside of the EEA. Should this change, we will ensure that any such transfers are protected using one of the following safeguards:

  • An adequacy decision by the European Commission confirming that the non-EEA country or organisation ensures an adequate level of data protection.
  • A contract with the recipient obliging them to protect the data to the same standards as the EEA.

8. Data Retention Policy

We retain personal data only for as long as necessary for the purposes for which it was collected. Typically, data such as subscription information is retained until you unsubscribe or request deletion.

9. Subject Access Requests

Individuals have the right to access their personal data held by us. To make a Subject Access Request (SAR):

  • Verification of identity will be required.
  • Further clarification may be requested to process the SAR.
  • A response will be provided within one calendar month once the request's legitimacy is confirmed.

We keep a log of SARs indefinitely, as per ICO guidelines. Data subjects have the right to:

  • Be informed if personal data is being processed.
  • Receive a description of the data, reasons for processing, and any recipients.
  • Obtain a copy of the personal data and information on its source.

10. Sharing Your Data

We do not share your personal data with third parties unless required by law or with your explicit consent. If you contact us about an issue, your data may be shared with relevant authorities or organisations to address your enquiry.

11. Data Rights

You have the following rights regarding your personal data:

  • Right of Access: Request a copy of the information held about you.
  • Right of Rectification: Correct data that is inaccurate or incomplete.
  • Right to Erasure: Request the deletion of data under certain circumstances.
  • Right to Restrict Processing: Limit the processing of your data.
  • Right to Data Portability: Transfer your data to another organisation.
  • Right to Object: Object to certain types of processing, such as direct marketing.
  • Right to Object to Automated Processing: Challenge decisions made without human intervention.
  • Right to Judicial Review: Complain if your request is refused.

12. Making a Complaint

If you are unhappy with how we have processed your data, you have the right to complain to the Information Commissioner's Office (ICO):

Address: 
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF 
Telephone: 0303 123 1113 
Website: https://ico.org.uk/concerns/

If you have any questions about the data held, please contact West Sussex Conservative Group via the contact information on this website.

Proof of identity is required to exercise any rights related to personal data.

13. Changes to This Policy

We retain the right to update this policy at any time. If changes significantly impact your rights, we will notify you in advance. Regularly reviewing this policy ensures you are always aware of how we handle and protect your personal information.