Privacy Policy
Please read this Privacy Statement carefully as it contains important information on how and why the Ebbsfleet Development Corporation (referred to as ‘EDC’) will collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact EDC.
The EDC website (‘the website’) is a service operated by EDC. The EDC is the data controller.
This Privacy Statement is divided into the following sections:
- Data controller
- What personal data will EDC collect about you?
- How and why EDC use your personal data?
- Who does EDC share your personal data with?
- How long will your personal data be kept?
- Your rights
- How to complain
- How to contact EDC
- Do you need extra help?
- Changes to the EDC Privacy Statement
DATA CONTROLLER
EDC as a data controller is responsible for collecting and processing your personal data. As a data controller, the EDC complies with the UK General Data Protection Regulation and the Data Protection Act 2018 (together referred to as ‘data protection laws’) and endeavours to keep your personal data accurate and up to date and ensure that it is not kept longer than necessary.
As a data controller, EDC has a responsibility to make sure you know why and how your personal information is being collected in accordance with the relevant data protection laws. This information relates to EDC’s use of any personal information you provide to EDC in person, online, via phone, by email, in letters, or correspondence.
WHAT PERSONAL DATA WILL EDC COLLECT ABOUT YOU
When you participate in, access or sign up to any EDC online content, such as completing a form or signing up to a newsletter, we may receive personal data about you. Some of this information may be classified as sensitive personal data.
This may consist of information such as:
- First name and last name
- Date of birth
- Contact information such as email address, telephone or address
- Demographic information such as postcode, preferences or interests
HOW AND WHY EDC USE YOUR PERSONAL DATA
By submitting these details, you enable EDC to provide you with the services, activities or online content you select. If you wish to no longer receive these communications, you can unsubscribe or opt out at any time. Alternatively, you can get in touch with EDC directly to remove your data (see ‘HOW TO CONTACT EDC’ below).
EDC will use your personal data for a number of purposes, including the following:
- To deal with your request and enquiries
- To provide EDC services, activities, or online content
- To provide you with the information about EDC services, activities or online content where you have specifically agreed to do so
- To personalise the way EDC content is presented to you
- To analyse and improve the services offered on the EDC website
More details about how we use your personal data and why, are set out in the table below.
Purpose | Categories of Personal Data | Legal basis for processing | Erasure |
Communications: EDC process your personal data in order to communicate with you and respond to requests and enquiries, to be able to provide you with information about our services, activities or online context, and to provide our services, activities and online content. EDC collect the data from the following sources: – Directly from you | We may process the following data about you: General personal data: – First Name – Last Name – Telephone Number – Email address Special categories of personal data: – Racial or ethnic origin – Sexual orientation – Religious or philosophical beliefs – Political opinion – Health data | EDC process your personal data as described, in accordance with: Article 6 (1) (f) (legitimate interests) of the UK GDPR. EDC’s legitimate interest is to be able to respond to your request and to communicate with you. | EDC store your personal data as long as it is necessary for the purposes mentioned: EDC store your general personal data for up to two years in accordance with our records retention schedule from the date on which EDC registered your visit to the website. |
Using EDC’s website: EDC process your personal data when you use the website. This is done of the following purposes: Optimisation and development: EDC use the data to analyse and improve the services offered, develop the user experience of [ebbsfleetdc.org.uk], personalise the way EDC content is presented to you. Statistics: EDC use the data to prepare user statistics of the website and to improve it. | We process the following data about you: General personal data: – Information about your use of the website, such as number of visits, and about your way of access to our website services, including IP address and browser and operating system. – Information about clicks on our webpages and what online content you view on our website. | EDC process your personal data as described, in accordance with: Article 6 (1) (f) (legitimate interests) of the UK GDPR. EDC’s legitimate interest is to provide a service which you have requested, to improve your experience and to develop and improve the website [and other digital services] (both in terms of functionality and system). | EDC store your personal data as long as it is necessary for the purposes mentioned: EDC store your general personal data for up to two years in accordance with our records retention schedule from the date on which EDC registered your visit to the website. |
Certain personal data we collect are treated as special categories of data to which additional protections apply under data protection law.
Where we process special category personal data, we will also ensure we are permitted to do so under data protection laws, e.g.,
- We have your explicit content;
- The processing is necessary to protect your (or someone else’s) vital interests where you are physically or legally incapable of giving consent; or
- The processing is necessary to establish, exercise or defend legal claims.
Where we process such special category personal data, we will also ensure we are permitted to do so under data protection laws.
WHO DOES EDC SHARE YOUR PERSONAL DATA WITH?
If we’re required by law to disclose personal data we will do so, in keeping with our obligations.
We may also share your data with providers of goods and services who have contracts with us. Data provided by you to us may in some circumstances need to be passed to third parties which we use for the running of our organisation, for example, to administer our newsletters or to a hosting provider to maintain the security and performance of our website.
Information passed to third such parties is used only to the extent required by them to perform the services that we request. Any use for other purposes is strictly prohibited. Furthermore, any data that is processed by third parties for us will be processed within the terms of this privacy notice and in accordance with the GDPR and any other applicable legislation.
We only allow such third parties to handle your personal data if we are satisfied they take appropriate measures to protect your personal data. We also impose contractual obligations on them.
With our subscription services (e.g. email alerts and newsletters), if you choose to subscribe to our services, we will use your information to send you updates about services you may be interested in. You can unsubscribe at any time by letting us know.
EDC does not pass personal data to third parties for marketing, sales or any other commercial purposes without your prior explicit consent.
Transfers outside the UK
Some of our third-party service providers may be located outside the UK. Therefore, personal data which we collect from you may be stored, processed in and transferred to such countries, which may not have as stringent data protection laws as found in the UK. If we transfer your data outside the UK in this way, we will ensure that the third-party service provider which we use is compliant with the GDPR and that your privacy continues to be protected as outlined in this privacy notice.
HOW LONG YOUR PERSONAL DATA WILL BE KEPT
EDC will not keep your personal data for longer than needed for the purpose for which it is used. For example, letters and emails that we send to you, or you send to us may be retained as a record of contact and your contact details stored for future use in accordance with our record retention schedule. If EDC needs to email sensitive or confidential information to you, we will perform checks to verify the correct email address and may take additional security measures.
[If you no longer have an account with EDC or are no longer receiving services, EDC will delete or anonymise your account data after 2 years.]
EDC also reserve the right to monitor and record electronic communications (website and email correspondence) for the purposes of record retention
Email – emails, including those sent through our contact form, may be kept as a record of contact; and
Website – our website does not store or capture personal information of visitors, unless you complete a contact form, but it does log visitors’ IP addresses, and cookies are used across the website. While your use of the website will be logged, you will remain anonymous to us.
Where our website links to external resources or websites, these may add their own cookies. These are outside our control. Cookies can be disabled by changing the settings on your computer browser, but you may need to re-enter information at times.
YOUR RIGHTS
When EDC processes your data, you have the following rights as a data subject (the individual the personal data relates to):
- You have the right of access to, rectification, or erasure of your personal data.
- You may request that EDC restrict processing of your personal data in relation to any service. (This may delay or prevent us delivering a service to you). We will seek to comply with your request but may be required to tore or process information to comply with our legal duties.
- You have the right to receive the personal data that you have provided yourself in a structured, commonly used and machine-readable format (data portability).
- If you find that the information EDC holds about you is no longer accurate, you have the right to have this corrected.
- If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal of consent will not affect the lawfulness for the processing performed before the withdrawal of your consent.
- You have the right to receive the personal data that you have provided yourself in a structured, commonly used and machine-readable format (data portability).
- You have an unconditional right to object to the processing of your personal data for use for direct marketing purposes.
- You have a right not to be subject to automated processing.
These rights may be conditioned or restricted. For more information on each of those rights, including the circumstances in which they apply, please contact EDC’s Data Protection Officer via:
In writing to:
Data Protection Officer,
Ebbsfleet Development Corporation,
The Observatory,
Castle Hill Drive,
Castle Hill,
Ebbsfleet Valley,
DA10 1EE,
or
By email: contactebbsfleetdc@ebbsfleetdc.org.uk and address to the Data Protection Officer.
HOW TO COMPLAIN
We aim to resolve any enquiries or concerns about the processing of your personal data to your satisfaction, however if you are not satisfied with our response, you may contact:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number
Fax: 01625 524 510
HOW TO CONTACT EDC
You can contact EDC and/or EDC’s Data Protection Officer by post, email or telephone if you have any questions about this Privacy Statement or the information EDC holds about you, to exercise a right under data protection law or to make a complaint.
EDC’s contact details are shown below:
EDC Contact Details: General
In writing:
Ebbsfleet Development Corporation,
The Observatory,
Castle Hill Drive,
Castle Hill,
Ebbsfleet Valley,
DA10 1EE,
By email:
contactebbsfleetdc@ebbsfleetdc.org.uk
By telephone:
0303 444 2586
EDC Contact Details – Data Protection Officer
In writing:
Data Protection Officer,
Ebbsfleet Development Corporation,
The Observatory,
Castle Hill Drive,
Castle Hill,
Ebbsfleet Valley,
DA10 1EE,
By email:
contactebbsfleetdc@ebbsfleetdc.org.uk and address to the Data Protection Officer.
DO YOU NEED EXTRA HELP?
If you would like this notice in another format (for example audio, large print, braille) please contact us (see ‘HOW TO CONTACT US’ above).
CHANGES TO THE EDC PRIVACY STATEMENT
The Privacy Statement may be updated from time to time so you may wish to check it occasionally. If material changes are made to the Privacy Statement, we will notify you by means of a prominent notice on the website.