Who we are
We are the Newtongrange Community Council (NCC). The NCC is a voluntary organisation set up by statute by Midlothian Council and run by Newtongrange residents to act on behalf of its area with operational address:
We are committed to protecting and respecting your privacy.. Our website address is: https://newtongrange.org.
What personal data we collect and why we collect it
For the purposes of Data Protection Law, we are the Data Controller in relation to the processing of your personal data through the following services.
What information do we collect about you?
We collect and process data about you in different ways, depending on the service you are using. We collect data through the following services:
- Contacting us via our website or dedicated email address
- Our newsletters
- Surveys that we run
- Our website
- Our Facebook page and social media plugins
- Comments and media posted to our website (NCC members only)
Please refer to the relevant section below.
Contacting us
Personal data you give us when you contact us:
- Name
- Email address
- Mail address where applicable
If you want to contact us you can email us directly at secretary@newtongrange.org. To allow us to contact you and keep you up to date with your request you must give us a valid email address.
We will store your personal information securely and use it to follow up on any requests or to contact you for more information.
Our legal basis for processing your information is that we have a legitimate interest to communicate effectively with our community and its stakeholders to meet NCC objectives and project commitments.
Newsletters
Personal data you give us when you subscribe to one or more of our newsletters:
- Name
- Email address
- IP Address
- Mail Address (if appropriate for paper subscriptions
We offer a number of newsletters on a range of topics. We use the Mailchimp service for this and we will subscribe you to a mailing list using that service.
When we send you a newsletter, we also gather statistics around email opening and clicks to help us monitor and improve our newsletters. You can find out more about this in Mailchimp’s privacy policy.
Our legal basis for processing your personal data is that you consent to provide us with your information so that we can send you information about NCC matters that relate to your subscription and preferences.
Surveys
Personal data you give us when you complete one of our surveys:
- Name
- Email address
- IP address
Our legal basis for processing your personal data is that you consent to provide us with the information so that we can process survey responses and analyse the results.
Website
We use Google Analytics to collect standard internet log information and information about how you use the site. The information we collect is:
- Your IP address and hostname
- Which web browser you are using
- The pages on our website that you visit
- The address of the website that you reached us from, including any search term used
Our legal basis for processing your personal data in this way is that we have a legitimate interest to understand how people are using our website so that we can improve the content and services we offer.
Comments (Community Council Members only)
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media (Community Council Members only)
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
This notice (along with any Terms and Conditions where appropriate, together our Terms of Use) applies to your use of our website and the services we offer.
Please note that any reference to Data Protection Law we make in this document includes the Data Protection Act 1998 and the General Data Protection Regulation (“Data Protection Law”).
We are required by law to treat your personal information legally and fairly. We must also give you the means to correct it if it is wrong, allow you to object to our processing it and, in some instances, delete it from our systems if you ask us to do so.
How do we use the data we collect?
We use personal data held about you in the following ways:
- To allow you to sign up for our newsletter so that we can send you information about what we are doing, community consultation and events you might be interested in;
- To develop and improve the content of the newsletters we offer
- To canvass your views and opinions on a range of issues relevant to our community;
- To help you with any queries you may have in relation to the Newtongrange Community Council website and activities;
- To develop and improve the website, services and community engagement;
- To fulfil our legal obligations
Disclosure of your personal data
We will not sell your information or disclose it for direct marketing purposes.
We will disclose the personal data we process about you to the following third parties for the purposes indicated in the table below:
Personal Data |
Recipient |
Purpose |
---|---|---|
Name, email address, IP address | The Mailchimp email service | To send you personalised newsletters periodically |
Name, email address, IP address | The Surveychimp survey service | To allow you to participate in our surveys |
IP address | Google Analytics | To analyse our website visitors, where they have come from and what content they find most useful |
Disclosure to other parties
In addition, we may disclose your personal data to third parties if, and only if:
• we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation or request;
• In order to:
– enforce or apply any Terms of Use or other agreements you have agreed to with us or to investigate potential breaches; or
– protect the rights, property or safety of our users or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection.
Where we store your personal data
Personal data you provide to us is stored on a password protected, encrypted and backed up servers in European Union/EEA with the following exceptions:
We use the Mailchimp service to send you periodic newsletters and this means that some of your data is transferred to servers in the USA. We also backup our website to Dropbox servers in the USA which is encrypted and password protected.
The Mailchimp and Dropbox services are covered by both the EU-US and Swiss-US Privacy Shield regimes and are used by many EU and worldwide businesses. As such, in our opinion, it poses a minimal threat to your privacy rights and freedoms.
Please see then Data Processor Agreement addendum with Mailchimp that specifically covers customers located in the EU.
You can read more about Mailchimp’s privacy measures.
See also Dropbox Privacy Shield and policy.
We use the Google Analytics service. This means that some of your data is transferred to servers outside the European Union/EEA. More information about these services is included below.
How long we will keep your data for
The following table shows what personal information we hold and how long it is held for.
Personal Data | How long we hold it |
---|---|
Newsletter | Retained for as long as you subscribe; deleted immediately when you unsubscribe |
Contact data | Retained for the period it takes us to respond to your query satisfactorily or after one calendar year |
Survey | 1 year |
Website analytics logs | 26 months |
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data in transit; any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access to your personal data.
Your rights
You have the following rights:
- You can seek to restrict our processing of your personal data or object to us processing your personal data at any time by contacting us at secretary@newtongrange.org or by writing to us at our main office address listed above.
- You have the right to lodge a complaint with the Information Commissioners Office (ICO) if you think that we have infringed your rights. You can find more information about reporting a matter to the ICO at the following link: https://ico.org.uk/
- You have the right to access personal data held by us about you. If you wish to view, correct or update any information we hold about you please get in touch by email to secretary@newtongrange.org or by writing to us at our main office address listed above.
- In certain circumstances you have the right to ask us to delete all the information we hold about you. If you wish to do so, please get in touch by email to secretary@newtongrange.org or by writing to us at our main office address listed above. Please note that we may be obliged to retain some information about you to allow us to fulfil our legal obligations.
Please be aware that we are legally obliged to verify your identity using reasonable means before you can exercise your rights.
Our newsletter
If you sign up for our newsletters, we will send an e-mail to the registered e-mail address in which you will be asked to confirm your newsletter subscription (Double-Opt-In). When you accept, your IP Address and the date and time of your acceptance will be saved. We will only share your personal information with technical services that are needed to deliver your newsletter. You are free to unsubscribe to our newsletter service whenever you want by clicking on the unsubscribe button in the newsletter or by sending an e-mail to secretary@newtongrange.org
Our website
Our website may, from time to time, contain links to and from the websites of third parties. If you follow a link to any of these websites, please note that these websites and any services that may be accessible through them have their own privacy notices and that we do not accept any responsibility or liability for these notices or for any personal data that may be collected through these websites or services, such as contact and location data. Please check these notices before you submit any personal data to these websites or use these services.
Social media plugins
Our website may use Social Media plugins (plugins) for Facebook, Twitter, Youtube and others. If you call up one of our website pages which has a plugin of this kind, your browser sets up a direct link to the social media provider servers. The content of the plugin is passed by the provider directly to your browser and integrated by it into the website. This means that we have no influence over the data that they obtain with the help of this plugin.
We therefore inform you that through the plugin, the provider obtains information about you, even if you do not own a profile with the provider or are not logged in at the time. This information, including your IP address, will be passed from your browser directly to the provider and stored on its servers. The server location may be outside the European Union/EEA.
Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics also uses cookies. The information generated by the cookie about your use of this website is usually transmitted to and stored by Google on servers outside the European Union/EEA. Google will use this information to evaluate your use of our website, to compile reports on website activity and to provide other services related to website activity and internet usage to us. The IP address provided as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by disabling them in your browser. You can find out how to do this by visiting http://www.allaboutcookies.org
Please note that if you disable cookies, some of the functionality on our website may not be available to you or may not work as expected.
In addition, you may prevent the collection of analytics data by Google by downloading an add-on for your browser by visiting https://tools.google.com/dlpage/gaoptout?hl=en-GB
Once you install the add-on, an opt-out cookie will be set which prevents the future collection of your data when visiting our website.
For more information about Google’s Terms of Use and Privacy, please visit https://www.google.com/analytics/learn/privacy.html
Cookies
We uses cookies (small text files that we place on your device) to help provide our services to you. For more information, please read our Cookie Policy at www.communitycouncils.scot/cookies-policy.html
Changes to privacy notice
Any changes we may make to our privacy notice in the future will be posted on our website and, where appropriate, notified to you when you next visit. The new terms may be displayed on-screen and you may be required to read and accept them to continue your use of our services.
Contact
Questions, comments and requests regarding this privacy notice are welcomed and should be addressed by email to secretary@newtongrange.org or in writing to our main office address above.
Version 1.12
Last Updated 15/03/2020