Somerset Co-operative Services CIC
Data Privacy Notice
Data Controller:
ICO Number: Z2711408
Data Processor:
Purposes of Processing
- enquire about our services
- become a client/service user
- attend events or courses
- if you have opted-in to receive marketing and promotional information about SCS and/or related services.
- To enable us to provide you with consultancy, information, or other services that you have asked us to provide
- To maintain our own accounts and records
- To inform you, with your consent, about our products and services or information that is likely be relevant to you or your organisation
The legal basis for processing your personal data:
What Data does SCS collect:
- Your name
- Contact details (e.g. postal address, email address and telephone number)
- Any information relevant to the services may be providing to you
- Website analytics data e.g. IP address, pages visited, and files downloaded
- Information used to evaluate our social impact e.g. number of attendees at an event or on a course
- To evaluate and improve the quality of our services, for example via anonymous feedback forms.
How SCS processes your data:
- is kept up to date
- is stored and destroying it securely
- is protected from loss, misuse, unauthorised access, and disclosure
To carry out our services, SCS may ask you to directly
provide data in the following ways:
- By online form, email, telephone, postal or in person
- Voluntarily completing customer survey
- Using or viewing our website via your browser's cookies
How long SCS keep your personal data:
SCS keeps personal data for no longer than necessary.
For services provided: SCS are required under UK tax
regulations to keep certain basic personal data (name, address, contact
details) for a minimum of 6 years after which time any such data we hold will
be destroyed.
For enquiries: Data
held from general enquiries will be destroyed after 12 months.
For Marketing: In cases where you have you have opted-in to
receive marketing and promotion materials SCS will keep necessary contact data
until either:
You notify us otherwise and/or withdraw your consent
If the service is closed. In this case your data will be kept only inline with our general retention policy, unless you notify us otherwise.
SCS has review and retention policies in place as part of our Data Protection Policy to meet these obligations.
You notify us otherwise and/or withdraw your consent
If the service is closed. In this case your data will be kept only inline with our general retention policy, unless you notify us otherwise.
SCS has review and retention policies in place as part of our Data Protection Policy to meet these obligations.
Sharing your personal data
- For the purposes of processing and securely storing data, e.g. on cloud-based servers managed by third party providers (such as Dropbox, Microsoft 365. WordPress. Blogger, etc.). SCS ensure that any third-party provider used for this purpose adheres (to the best of knowledge and due diligence) to the Data Protection Action 2018 and the GDPR
- Regulatory Authorities where this is necessary to complete
work on your behalf such as Legal Registration or the completion of Annual
Returns
- Third parties contracted to provide training and associated services. Providers are contractually required to protect your data and comply with this policy, the Act and GDPR Regulations
- Third parties providing you with associated services (to the extent that this has been previously agreed by you with those organisations and/or SCS, and who are contractually required to protect your data and comply with GDPR.)
- in connection with any legal proceedings or prospective legal proceedings
- in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk)
Your rights and your personal data
- To request a copy of any data SCS holds (there will be no charge for the first request, but subsequent requests will be charged at £10),
- SCS CIC to correct any data that is inaccurate or out of date, data is erased where it is no longer necessary SCS to retain it,
- SCS provides you data we hold and/or to transmit that data directly to another data controller
- a restriction on further processing while any question of accuracy or our right to hold or process it is resolved
- To object to the processing of personal data
- To lodge a complaint with the Information Commissioners Office https://ico.org.uk/make-a-complaint/your-personal-information-concerns/
Transfer of Data Abroad
Automated Decision Making
Consequences of Not Providing Your Data
information is required for us to provide you with our services, we will not be able to
provide our products or services without it.
How we use cookies:
Cookies are small text files that are
placed on your computer by
websites you visit. They are widely used and enable many aspects of a website to
function. SCS uses cookies to improve visitors experience of our website, including,
understanding how visitors use the SCS website and to improve website efficiency.
Cookies collect standard internet log information and visitor behaviour information. SCS
use third party provider for this function.
websites you visit. They are widely used and enable many aspects of a website to
function. SCS uses cookies to improve visitors experience of our website, including,
understanding how visitors use the SCS website and to improve website efficiency.
Cookies collect standard internet log information and visitor behaviour information. SCS
use third party provider for this function.
How to manage cookies
To find out more about cookies, including how to see what cookies have been set and how
to manage and delete them, visit allaboutcookies.org.
Contact SCS CIC
SCS Data Controller Alice Ling at alice@somerset.coop. If we receive a
request from you to exercise your rights, we may ask you to verify your identity before
acting on a relevant request; this is to ensure that your data is protected and kept secure.
The registered office of SCS is 10 East Reach, Taunton TA1 3EW, and the company
registration number is 06018662.
Contact the Information Commissioners Office
https://ico.org.uk/global/contact-us/email/