Your Data & Privacy
Who we are
In this privacy policy references to "we", "us" and "our" are to Active Cumbria, The Active Partnership for Cumbria. References to "our Website" or "the Website" are to www.activecumbria.org
We are part of Cumberland Council and as such abide by their policies, procedures and rules. Cumberland Council is the 'data controller' under the UK General Data Protection Regulation and is committed to protecting your privacy when you use its services including the services provided by Active Cumbria.
Sport England
As an Active Partnership we are contracted by Sport England to carry out a number of activities. In this instance, Sport England are the 'data controller' and we are a 'data processor'. Sport England will still be responsible for decisions about how your personal data is used.
See Sport England Privacy Notice>>
What information we collect and how
The information we collect via this Website may include:
- Any personal details you knowingly provide us with through forms and our email, such as name, address, telephone number etc.
- Your preferences and use of email updates, recorded by emails we send you (if you select to receive email updates on products and offers).
- Your IP Address, this is a string of numbers unique to your computer that is recorded by our web server when you request any page or component on the Website. This information is used to monitor your usage of the Website.
- Data recorded by the Website which allows us to recognise you and your preferred settings, this saves you from re-entering information on return visits to the site. Such data is recorded locally on you computer through the use of cookies. Most browsers can be programmed to reject, or warn you before downloading cookies, information regarding this may be found in your browsers 'help' facility.
What we do with your information
Any personal information we collect from this website will be used in accordance with the Data Protection Act 2018 (DPA 2018) and other applicable laws. The details we collect will be used:
- To process your enquiries or orders, to provide after sales service (we may pass your details to another organisation to supply/deliver products or services you have purchased and/or to provide after-sales service);
- In certain cases we may use your email address to send you information on our other products and services. In such a case you will be offered the option to opt in/out.
- We may need to pass the information we collect to other companies for administrative purposes. We may use third parties to carry out certain activities, such as processing and sorting data, monitoring how customers use the Website and issuing our e-mails for us. Third parties will not be allowed to use your personal information for their own purposes.
- We have selected a number of integrated systems to help us process, store and manage your data, these include Mailchimp, Capsule and Eventbrite.
The Lawful Basis for Collecting Data
Before we collect and use personal data, we must be able to demonstrate that there is a lawful basis for us to do so. The UKGDPR provides six lawful bases for processing personal data:
- Consent: when you have explicitly told us that we may collect and use your personal data – for example by asking us to add you to one of our mailing lists.
- Contract: when we need to collect and use personal data to enter into or perform a contract – for example if you receive services from us.
- Legal obligation – when we need to collect and use personal data to carry out our legal duties – for example to respond to a request for information under the Freedom of Information Act.
- Vital interests: when we need to collect and use personal data to protect your vital interests or the vital interests of another person – for example by contacting the relevant authorities if we believe an individual is likely to come to immediate harm.
- Public task: when we need to collect and use personal data to carry out one of our official tasks, or a task that is in the public interest – for example when we carry out surveys about participation.
- Legitimate interests: when we need to collect and use personal data to pursue the legitimate interests of Cumbrerland Council, Active Cumbria, Sport England or a third party, unless doing so would interfere with your rights and freedoms – for example when we are dealing with complaints about an organisation we have funded.
Our lawful basis for collecting and using personal data varies depending on why we have collected it and what we will do with it. Whenever we collect personal data directly from you we will set out our lawful basis as clearly as we can, or links to the information you need. If we receive personal data about you from a third party, we will use reasonable efforts to identify our lawful basis where it is possible and practical for us to do so.
Your Rights
Access
Subject to certain conditions, you are entitled to have access to your personal data (this is more commonly known as submitting a "data subject access request"). If possible, you should specify the type of information you would like to see to ensure that our disclosure is meeting your expectations. We must be able to verify your identity. Your request may not impact the rights and freedoms of other people, eg privacy and confidentiality rights of other staff. Where you, the data subject, make a request by electronic form means, the information will be provided by electronic means where possible, unless otherwise requested.
Data Portability
Subject to certain conditions, you are entitled to receive the personal data which you have provided to us and which is processed by us by automated means, in a structured, commonly-used machine readable format. If you exercise this right, you should specify the type of information you would like to receive (and where we should send it) where possible to ensure that our disclosure is meeting your expectations. This right only applies if the processing is based on your consent or on our contract with you and when the processing is carried out by automated means (ie not for paper records). It covers only the personal data that has been provided to us by you.
Inaccurate or Incomplete Data
You may challenge the accuracy or completeness of your personal data and have it corrected or completed, as applicable. You have a responsibility to help us to keep your personal information accurate and up to date. We encourage you to notify us of any changes regarding your personal data as soon as they occur, including changes to your contact details, telephone number, immigration status. Please always check first whether there are any available self-help tools to correct the personal data we process about you. This right only applies to your own personal data. When exercising this right, please be as specific as possible.
Object to/Restrict Processing
Subject to certain conditions, you have the right to object to or ask us to restrict the processing of your personal data. As stated above, this right applies where our processing of your personal data is necessary for our legitimate interests. You can also object to our processing of your personal data for direct marketing purposes.
Erasure
Subject to certain conditions, you are entitled to have your personal data erased (also known as the "right to be forgotten"), eg where your personal data is no longer needed for the purposes it was collected for, or where the relevant processing is unlawful. We may not be in a position to erase your personal data, if for example, we need it to (i) comply with a legal obligation, or (ii) exercise or defend legal claims.
Withdrawal of consent
As stated above, where our processing of your personal data is based on your consent you have the right to withdraw your consent at any time. If you withdraw your consent, this will only take effect for future processing.
You also have the right to complain with the Information Commissioner's Office (ICO), which is the UK data protection regulator. More information can be found on the Information Commissioner's website: www.ico.org.uk/concerns
Who to Contact
If you would like to discuss your information rights further, please contact:
Email:
information.governance@cumberland.gov.uk
Post:
Data Protection, Cumberland Council, Cumbria House, 117 Botchergate , Carlisle CA1 1RD
Changes to this Policy
We may change this Privacy Policy at any time and from time to time. All updates and amendments are effective immediately upon notice, which we may give by any means, including, but not limited to, by posting a revised version of this Privacy Policy or other notice on the Website.
Other Websites
This privacy policy only covers this website. Any other websites which may be linked to by our website are subject to their own policy, which may differ from ours.
