Data that we hold

1. We hold a variety of personal data relating to volunteers and potential volunteers, including name, address, telephone number, electronic contact details, emergency name and contact number, volunteering interests, special skills and qualifications, previous volunteering experience and special requirements that you tell us about.

 

Statement of purpose

2. Your personal data is retained for the purpose of volunteer management and work in connection with Granite Heart’s charitable objectives. Your personal data will be securely retained in confidence by Granite Heart, will not be used for any other purpose, and will never be sold on or released for marketing purposes to third parties.  

 

Legal basis and period

3. Potential volunteers list: Your personal data will be held indefinitely while you remain on our potential volunteers list. On request we will at any time remove you from the list and delete your data. Your consent provides the legal basis for the processing of your personal data. If a suitable volunteer role becomes available your data will be retained and you will become an active volunteer.

 

4. Active volunteers: Your personal data will be held indefinitely while you remain an active volunteer, and for three years after that in case of later legal query (or for six years for key-holding volunteers). The legitimate interests of Granite Heart in achieving its charitable objectives provides the legal basis for the processing of your data. 

 

Details

5. The controller (the organisation responsible for your personal data) is Granite Heart, a Scottish Charitable Incorporated Organisation (SCIO) regulated by the Scottish Charity Regulator (OSCR), Scottish Charity Number: SC053411, whose registered address is Knapperna House, Udny, Ellon, AB41 6SA.

 

6. In addition to Granite Heart’s board, personal data may be processed by a limited number of volunteers, details of whom can be obtained on request.  Such volunteers have committed to handling all personal data in compliance with the EU’s General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. 

 

7. You retain the rights of full access to your data, to require Granite Heart to rectify any errors, and to object to any processing that you do not agree with; using those rights will not affect the lawfulness of the processing of your data prior to that date. Correspondence should be sent by email to contact@graniteheart.org

8.  You also have the right to lodge a complaint about the manner in which Granite Heart is handling your personal data with the UK supervisory authority, namely the Information Commissioner’s Office (https://ico.org.uk).