Millennium Stadium Charitable Trust
PRIVACY NOTICE
1. Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the “GDPR”).
2. Who are we?
Millennium Stadium Charitable Trust (MSCT) is the data controller. This means that the MSCT decides how your personal data is processed and for what purposes.
3. How do we process your personal data?
MSCT complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We use personal data for the following purposes: –
• To inform you of news, events, activities and charitable services of the MSCT
• To maintain our own accounts and records
4. What is the legal basis for processing your personal data?
We rely on explicit consent.
5. Sharing your personal data
Your personal data will be treated as strictly confidential. We will only share your data with third parties outside of MSCT with your consent.
6. How long do we keep your personal data?
We will keep your information for as long as required to enable us to operate our services but we will not keep your information for any longer than is necessary. When we no longer need to retain your information, we will ensure it is securely disposed of, at the appropriate time.
7. Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: –
• The right to request a copy of your personal data which the MSCT holds about you;
• The right to request that the MSCT corrects any personal data if it is found to be inaccurate or out of date;
• The right to request your personal data is erased where it is no longer necessary for the MSCT to retain such data;
• The right to withdraw your consent to the processing at any time
• The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
• The right to lodge a complaint with the Information Commissioners Office.
8. Further processing
If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
9. Contact Details
To exercise all relevant rights, queries of complaints please in the first instance contact the Administrator of the MSCT ( Sarah Fox ) at 4 Bessemer Road , Cardiff, CF11 8BA
You can contact the Information Commissioner’s Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/.
This privacy policy may be updated from time to time.
Applicants should note that the names of organisations funded by the Millennium Stadium Charitable Trust and the amounts they receive may be released to the public via press releases. This information is also available in the Trust’s annual report and on request. The Trust will use the information provided on the application form (and during the life of the grant, if awarded) to administer and analyse applications and grants. The Trust may give copies of some or all of this information to individuals and organisations that are consulted when assessing applications and monitoring grants. These organisations and individuals may include external assessors, accountants and other organisations and groups involved in delivering the project. The Trust may also share the information with organisations providing matching funding, other public bodies and other organisations and individuals with a legitimate interest in grant applications to the Trust. To help the Trust meet the needs of voluntary and community organisations, data provided may also be used for internal and external research, reporting and promotional purposes. The Trust may from time to time send applicants more information relating to the Trust.