Privacy

This Privacy Notice lets you know how we will collect and use the information and personal data you provide when you use this site and other related services on which we post a direct link to this privacy policy. We respect and are committed to protecting your privacy and our procedures covering the storage and disclosure of your information are designed to comply with the Data Protection Act 2018. Should we choose to change this policy for any reason, the changes will be posted here.

Your personal data – what is it?

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the “GDPR”). Find out more about what constitutes personal data on the ICO (Information Commissioner's Office) here.

Who are we?

VOWMK is a partnership of women’s organisations (the members) who champion women’s voices to bring about change. The Voices of Women Milton Keynes (VOWMK) Steering Group is the data controller. This means the Group decides how your personal data is processed and for what purposes.

How do we collect Personal data?

We may collect Personal Information through this site and related services, e.g., when you request a free demo, register for an event, contact us, subscribe to our email newsletter, or download content (e.g. whitepapers).

How do we process your personal data?

VOWMK complies with its obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data. All personal data is kept on a secure cloud database Google. For the purposes of event booking we use Eventbrite we maintain a mailing list on Mailchimp; both of these services are based in the United States – please see their privacy policies and note that you will also have to agree to their terms and conditions of service. We comply with the privacy policies of Google, Mailchimp and Eventbrite.

We use personal data for the following purposes:

To create a Virtual Women’s Centre.
To create an online hub for sharing documents, statistical data, policy data, and lived experience data relating to women and girls in Milton Keynes.
To inform subscribers and site visitors of news, meetings, events, activities and services.
To survey views and collect insights on matters relevant to the women in Milton Keynes, to analyse these data and to use the anonymised data for reporting and monitoring.
To signpost subscribers and site visitors to women’s services and policy relating to women.
To register attendees and participants for our events, activities and projects.
To enable us to coordinate our volunteers, which includes: signing and managing volunteers, and communicating with them.
To administer records of subscribers to our Mailchimp Mail list.
To fundraise.
To co-organise events with our member organisations.
To maintain our own and records.

What is the legal basis for processing your personal data?

Your use of this web site signifies your consent to us collecting and using personal information about you in accordance with this Notice.

Explicit consent of the data subject as part of our subscription scheme so that we can keep you informed about news, events, activities and services.

Processing is necessary for carrying out obligations under health and safety, social protection law, or a collective agreement. Such protection and justification for processing applies to personal data relating to volunteers at VOWMK.

Where personal data is collected relating to attendance at a VOWMK event, unless specific consent is given, that data will only be used in communications around the administration, running and follow-up for that event under legitimate interest.

Where personal data is collected relating to any other short term project, only data that is needed will be collected, and the other considerations made clear elsewhere in this policy will apply.

Sharing your personal data

Your personal data will be treated as strictly confidential. Your personal data may be shared with the Steering Group members only for the purposes described above. We will only share your personal data with third parties outside of VOWMK with your explicit consent. Any such cases where partnership working requires data sharing, specific consent will be obtained.

How long do we keep your personal data?

We keep data in accordance with the GDPR, and our Steering Group has decided that in relation to subscription data (i.e. consent data), the appropriate duration for data retention should be three years. We have automated systems in place to ensure that personal data is not retained indefinitely without the relevant consent or another relevant legal basis for processing.

Your rights and your personal data

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
The right to request a copy of your personal data which VOWMK holds about you.
The right to request that VOWMK corrects any personal data if it is found to be inaccurate or out of date.
The right to request your personal data is erased where it is no longer necessary for the VOWMK to retain such data.
The right to withdraw your consent to the processing at any time.
The right to request that the data controller provide the data subject with his/her personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability). 1
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing.
The right to object to the processing of personal data.2
The right to lodge a complaint with the Information Commissioner's Office.

Further processing

If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we will publish a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

How do we use cookies?

We use cookies to provide you with better service. Cookies are pieces of information a website transfers to your computer’s hard disk for record-keeping purposes. Cookies can make the Web more useful by storing information about your preferences for a particular site. The use of cookies is an industry standard, and many major websites use them to provide useful features for their customers. Cookies in and of themselves do not personally identify users, although they do identify a user’s computer. Most browsers are initially set to accept cookies. If you prefer, you can set your browser to refuse cookies. However, you may not be able to take full advantage of the functionality of the websites or services if you do so.

Contact Details

To exercise all relevant rights, queries of complaints please in the first instance contact Ruth Stone on email voicesofwomenmk@gmail.com.

You can contact the Information Commissioner's Office on 0303 123 1113 or via email or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.

Links to third party websites

While we will take all reasonable precautions to make sure that other organisations who we deal with have good security practices, we are not responsible for the privacy practices of those organisations whose websites may be linked to our service.

Site usage data

We collect site usage statistics in order to manage and evaluate the website. Site usage statistics contain no personal information.

Disclosure

We reserve the right to access and disclose individually identifiable information to comply with applicable laws and lawful government requests, to operate its systems properly or to protect itself or its users.

1 Only applies where the processing is based on consent or is necessary for the performance of a contract with the data subject and in either case the data controller processes the data by automated means.

2 Only applies where processing is based on legitimate interests (or the performance of a task in the public interest/exercise of official authority); direct marketing and processing for the purposes of scientific/historical research and statistics.