What is this Privacy Policy Statement
We have produced a short privacy statement to clearly outline when we may collect your personal information and what we do with it.

Who are we?
Warwickshire Community and Voluntary Action is a registered charity (1123402) providing infrastructure support to the voluntary, community and social enterprise sector across Warwickshire and Solihull.

Warwickshire Community and Voluntary Action is the data controller. This means we decide how your personal data is processed and for what purposes.

How do we process your personal data?
Warwickshire Community and Voluntary Action complies with its obligations under GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

Why do we collect your data?

• To operate the Warwickshire Community and Voluntary Action website and mailing subscriptions and to deliver the services that individuals have requested
• To inform individuals of news, events, training, activities or services running in Warwickshire
• To contact individuals via surveys to conduct research about their opinions of current services or of potential new services that may be offered.

The legal basis for collecting your personal data

Under Article 6:
We send you information based upon your consent for us to do so. We give you access and the ability to manage your subscription settings and update these at any time via the following link: https://www.wcava.org.uk/subscriptions

We may also process your data where it is necessary for the performance of a contract with you or with one of our funders.

Under Article 9
In some cases, where we are employing staff or working directly with particularly vulnerable people we may be required to collect special category personal data and their data will be processed under article 9.

In these cases we will either gain:

• Explicit consent of the data subject or inform them that
• Processing is necessary for carrying out obligations under employment, social security or social protection law, or a collective agreement.

Sharing your information
We are subject to the law like everyone else. Sometimes, we must process your information in order to comply with a statutory obligation. For example, we may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order.

This may include your personal information.

Other than in these circumstances you can be assured that we will not share your personal information with third parties for marketing purposes.

Data Protection Legislation
Any information provided will be used and protected in accordance with the relevant data protection legislation including the Data Protection Act 1998, the General Data Protection Regulations (EU 2016/679) and any subsequent legislation as appropriate.

Access to your own information
You may obtain a copy of any information we hold about you by sending us a request at information@wcava.org.uk.

After receiving the request, we will tell you when we expect to provide you with the information, and whether we require any fee for providing it to you.

Removal of your information
If you wish us to remove personally identifiable information from our systems, you may contact us at information@wcava.org.uk

This may limit the service we can provide to you.

Verification of your information
When we receive any request to access, edit or delete personal identifiable information we shall first take reasonable steps to verify your identity before granting you access or otherwise taking any action. This is important to safeguard your information.

Updating our records
If you wish to amend or remove your contact preferences, update your details, receive a copy of the personal information we hold about you, transfer that data to another supplier, object to or restrict our processing of your data or be removed from our records please contact information@wcava.org.uk. We may need to contact you if there are any queries relating to your request. In some instances we may retain data relating to our contractual, regulatory and legal obligations.

If you have any concerns as to how your data is processed you can contact: Karen Winchcombe our Chief Executive and Data Protection Officer at karenw@wcava.org.uk or you can write to us at:

Registered Office:
Warwickshire Community and Voluntary Action
4-6 Clemens Street,
Leamington Spa,
Warwickshire
CV31 2DL

Complaints about data use: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 7GY