Dickerage Road Allotment Association

This data protection policy sets out the basis upon which Dickerage Road Allotment Association will process any personal data that it collects.

Legal requirements.

This policy complies with the Data Protection Act (2018). Since Dickerage Road Allotment Association processes only personal data which is relevant to managing its allotment site, it does not need to register with the Information Commissioner.

Personal data will be processed in accordance with the 8 data protection principles, which are as follows.

Personal data:

• shall be processed fairly and lawfully;
• must be obtained and processed for specified lawful purposes;
• shall be adequate, relevant and not excessive;
• must be accurate and kept up to date;
• shall not be kept for any longer than is necessary;
• shall be processed in accordance with the rights of data subjects;
• must be kept safe and secure at all times;
• shall not be transferred outside of the European Economic Area unless sufficient protection is ensured.
  
  

Personal data processed by the Association.

To manage the affairs of Dickerage Road Allotment Association, it is necessary to process personal data about our members, such as full name, postal address, e-mail address and telephone numbers. Details about members’ plot(s), invoices, rent payments and expenses are also processed.

Copies of correspondence from Members are kept and these may contain personal data.

Personal data is collected from prospective members when they join the waiting list and from members when they join the Association.

Personal data is only collected and processed for the management of the allotment site, lettings to members and associated activities.

 

Disclosure of personal data to third parties

To enable association membership of the National Allotment Society (NAS) it is necessary to share the contact details of members with that organisation. NAS has robust data protection policies in place. In the event of a Public Liability insurance claim, personal data may need to be shared with the insurance company. Personal data will not be shared with any other third party.

Rights of Data Subjects

• The right to be informed. Individuals have the right to be informed about the collection and use of their personal data.
• The right of access. Individuals have the right to access their personal data.
• The right to rectification. Individuals have the right to have inaccurate personal data rectified, or completed if it is incomplete.
• The right to erasure. Individuals have the right to have their personal data erased.
• The right to restrict processing. Individuals have the right to request the restriction or suppression of their personal data.
• The right to data portability. This allows individuals to obtain and reuse their personal data for their own purposes across different services.
• The right to object to the processing of their personal data in certain circumstances.
• Individuals have the right not to be subject to a decision based solely on automated processing,

Individuals wishing to exercise any of their rights should contact the DRAA Secretary, as mentioned in the Association's Privacy Notice.