Privacy Policy
Who are we?
We are the Gillingham and Rainham Conservative Association (“we”/”us”/”our”), and we are a part of the Conservative and Unionist Party, commonly known as the Conservative Party (The Party). As such we are a part of the “wider Conservative family” referred to in the Privacy Notice published on the national party’s website, and this Privacy Notice should be read in conjunction with that, available at www.conservatives.com/privacy. We process data and comply with the standards as set out in that policy.
In addition to the principles laid out on the national party’s website, we have included additional privacy terms which cover our independently developed website. These can be found below in the “Policy Additions”.
Data Protection and Privacy Policy
This document outlines how Gillingham and Rainham Conservatives processes and manages personal data and:
- Identifies the data controller.
- Explains the lawful basis for processing personal data.
- Outlines the personal data held and processed.
- Outlines the scope of the special category personal data held and processed.
- Outlines the process of Subject Access Requests.
Data Controller
The Data Controller is Gillingham and Rainham Conservatives
Contact
If you have any questions about this policy or for more information about how we use your data or would like to exercise any of your rights contact Gillingham and Rainham Conservatives.
Lawful basis for processing
All processing is carried out by consent or either under the legitimate interest of Gillingham and Rainham Conservatives, or public interest. These cover processing to conduct casework, campaigning and communication. Where processed under the lawful basis of a task carried out in the public interest, it is to support or promote democratic engagement. This includes fundraising activity in order to support democratic engagement.
Data sources
Data held is that provided by you when you contact us and correspondence with third parties in response to cases taken up on your behalf. If you do not wish for us to contact you by telephone please do not provide this information. The Register of Electors that councils provide to authorised persons under the Representation of the People Act is also used for electoral purposes.
Data security
Personal data is stored electronically and securely. We ensure that our service providers comply with the same high standard that we do, and are in the UK.
Special category data
Special category data will be processed under the lawful basis indicated in section 3, as is permitted in clauses 22, 23 and 24 of schedule 1 of the Data Protection Act, covering political parties and elected representatives.
Transferring your data outside of the European Economic Area
Some service providers are located outside of the European Economic Area (EEA) and therefore it may be necessary to transfer your personal data outside of the EEA. Where the transfer of your data outside of the EEA takes place we will make sure that it is protected in the same way as if the data was inside the EEA, and it only occurs with your consent.
We will use one of the following safeguards to ensure this:
- Where the European Commission has issued an adequacy decision determining that a non-EEA country or organisation ensures an adequate level of data protection.
- A contract is put in place with the recipient of the data obliging them to protect the data to the same standards as the EEA.
- The transfer is to an organisation that complies with the EU-US Privacy Shield.
Legally it is not permitted to transfer certain types of data, such as Electoral Register Data, outside of the EEA, and we honour that obligation.
Data retention policy
Personal data will be held for no longer than necessary. Some types of data may be held for longer than others. Typically the maximum retention is two election cycles. Review of the data held will occur in each election cycle to determine whether it should be maintained or put beyond use.
Subject Access Requests
Subject Access Requests are dealt with in line with the guidance given by the Information Commissioner’s Office (ICO):
- We will request verification of the identity of any individual making a request, and ask for further clarification and details if needed.
- We will respond within 28 calendar days once we have confirmed it is a legitimate request.
- Data subjects have the right to the following:
- Right of access – you have the right to request a copy of the information held about you.
- Right of rectification – you have a right to correct data held about you that is inaccurate or incomplete.
- Right to be forgotten – in certain circumstances you can ask for the data held about you to be erased from our records.
- Right to object – you have the right to object to certain types of processing, such as direct marketing.
- Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
- Right to judicial review – if our office refuses your request under rights of access, we will provide you with a reason why. You have the right to complain.
Making a complaint
If you are unhappy with the way that we have processed or handled your data then you have a right to complain to the Information Commissioner’s Office (ICO). The ICO is the supervisory body authorised by the Data Protection Act 2018 to regulate the handling of personal data within the United Kingdom. The contact details for the ICO are:
Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/concerns/
If you have any questions about the data held please contact Gillingham and Rainham Conservatives via the contact information on this website.
Please note that proof of identity is required should you choose to exercise any of the above rights in relation to personal data.
This website itself is self-supported by the Gillingham and Rainham Conservatives and carefully chosen 3rd Parties who unequivocally abide by the Privacy Policy of the Conservative Party as a minimum standard.
We retain the right to update this policy at any time. If there are changes that significantly impact your rights, we will contact you in advance and/or post a notice on this website.
Last reviewed
This privacy policy was last reviewed on the 27th of May 2024.