Data Privacy Notice

Leeds Cycling Campaign (LCC) is a voluntary organisation based in Leeds, West Yorkshire. We campaign for a cycle friendly city, organise social rides and provide information about cycling in the Leeds area.  See our website  or our Facebook page.

Leeds Cycling Campaign respects your privacy and is committed to protecting your personal data.

This document explains how we process your personal data and how, in doing so, we comply with our legal obligations to you. We may amend this information from time to time.

This document is to be read in conjunction with the Campaign’s Data Protection Policy.

 

Data Privacy Notice

Identity and contact details of the data controller

The Data Controller is the current Membership Secretary of Leeds Cycling Campaign.  Contact membership [at] leedscyclingcampaign.co.uk or write to:

The Data Controller

Leeds Cycling Campaign

c/o The Cardigan Centre

145-149 Cardigan Road

Leeds LS6 1LJ

 

Purpose of the processing and the lawful basis for the processing

We will process your personal data for the purpose of including you in our campaign.  If you have consented to it we will add you to our newsletter email list so we can send you information about our campaign.

Our lawful basis for processing personal data (see article 6 of the GDPR) is either of the following:

Legitimate interests”, which are that we only process such personal data as is necessary to keep a record of membership and financial transactions, and emergency contact details of those members wishing to participate in rides;

“Consent”, where the individual has given clear consent for us to process their personal data for a specific purpose (such as receiving a newsletter, or supporting a particular campaign objective).

 

Categories of personal data

The categories of personal data we will process are

  • your name
  • your email address or other online identity such as Twitter name
  • phone number
  • your full address (or postcode as appropriate)
  • any payments you have made to us

We may also keep a record of petitions or campaigns to which you have added your name.

Bank account or PayPal account details will be recorded only for the following purposes:

  • processing standing order instructions or other payments you may make to us
  • making payments to you in respect of money we owe you.

Only the Treasurer and authorised account signatories will have access to these details.

 

Any recipient or categories of recipients of the personal data

We will not generally share your personal data with anyone else except as provided for below:

For the purposes of insurance cover we will share with Cycling UK the personal data of recognised ride leaders as follows:

  • full name
  • date of birth
  • email address

 

Details of transfers to third country and safeguards

We will store the personal data you have provided on Dropbox, a secure cloud-based data storage company based in the USA.  For their own GDPR policy, see https://www.dropbox.com/security/GDPR

If you have consented to being added to our newsletter or other emailing lists then your name and email address will be stored in our MailChimp account. MailChimp’s servers are based in the USA. For information on how they comply with the GDPR and the US-EU Privacy Shield please read their Privacy Policy at: https://mailchimp.com/legal/privacy/

If you submitted personal data to us via a webform on our website (for example a membership joining form) this will be stored on the web-hosting platform and email server of Civi-Hosting which is located in Bulgaria.  For information about how they comply with the GDPR, please see their Privacy Statement here:

https://civihosting.com/privacy-statement/

 

Retention period or criteria used to determine the retention period

We will retain your personal data as a Campaign supporter until two years after your membership ends (this is to allow for delayed renewals). You can however request that we remove your personal data from our any of our email lists at any time. Please contact us at membership [at] leedscyclingcampaign.co.uk if you wish to do so.

If you have consented to be added to our any of our email lists you can unsubscribe from them at any time following the unsubscribe link in the email footer.

 

The rights available to individuals in respect of the processing

We will process all personal data in line with your rights, which are:

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision making and profiling.
  • The right to withdraw consent at any time, where relevant

Please contact the Data Controller (see page 1) if you wish to exercise any of these rights.

 

The right to lodge a complaint with a supervisory authority

You have the right to complain to the Information Commissioner’s Office if you think there is a problem with the way we are processing your data.

 

The source the personal data originates from and whether it came from publicly accessible sources

The personal data we hold about you was provided by you. It did not come from publicly accessible sources.

 

Whether the provision of personal data is part of a statutory or contractual requirement or obligation and possible consequences of failing to provide the personal data

The provision of personal data is not part of a statutory or contractual requirement or obligation. Without your personal data we would not be able to contact you about our campaigns or count you as a supporter of Leeds Cycling Campaign.

 

The existence of automated decision making, including profiling and information about how decisions are made, the significance and the consequences.

We do not make use of any automated decision-making processes.

 

Website Use and Cookies

If you submitted personal data to us via a webform on our website (for example a membership joining form) this will be stored on the web-hosting platform and email server and will be held in accordance with the retention period(s) described above which in any case shall be no longer than two years after your membership has ended or in the case of an online purchase, two years after the transaction was processed.

Our website does not use cookies.

 

Leeds Cycling Campaign Data Privacy Policy and Notice

Version 1.4 - July 2019