NORTH WALES SOCIETY OF FINE ART
PRIVACY POLICY
The North Wales Society of Fine Art (“NWSFA”, "we", "our", "us") is committed to protecting and respecting your privacy.
This policy (together with our Website Terms of Use) sets out the basis on which any personal information that we collect from you, or that you provide to us, when using this website (https://www.nwsfa.org.uk) (the “Website”) will be processed.
Please read the following carefully to understand our practices regarding your personal information and how we will treat it.
1. ABOUT US
NWSFA is a not-for-profit unincorporated association. For the purposes of communications arising from data protection matters its principal place of business is [insert postal address]. NWSFA is the data controller in respect of your personal information. This means that we are responsible for deciding how we hold and use personal information about you.
2. WHAT INFORMATION WE COLLECT AND HOW WE WILL USE IT
We collect personal information so that we can operate the Website effectively. The information we collect depends on how you use the Website. It also depends on the choices you make, for example the functions you use and your privacy settings. You may choose not to provide certain information but if you do, and that information is necessary to provide a particular feature, then you may not be able to use that feature.
We will only use your personal information where we have a valid lawful basis to do so. The table below summarises what information we collect about you, explains how we intend to use it and what our legal basis is for using it.
3. CHANGE OF PURPOSE
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
4. SHARING YOUR INFORMATION
You acknowledge that we may share your personal information with your consent or as necessary with selected third party service providers that support us in the operation of the Website or performance of the activities set out in the table above.
We require all those third party service providers to take appropriate and stringent security measures to protect your personal information. We do not allow our third party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes in accordance with our instructions.
5. STORING YOUR INFORMATION
The personal information that we hold about you will only be processed and stored within the United Kingdom.
We will only retain your personal information for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting obligations.
6. KEEPING YOUR INFORMATION SECURE
All information that you provide to us is stored on secure servers. We have put in place appropriate measures to protect the security of your information.
The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of the information transmitted to our site and you acknowledge that any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access or inadvertent disclosure.
7. Your Rights
You have the right under data protection laws to:
· request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it. We will need to prove your identity before we release any personal information to you;
· request correction or erasure of your personal information (unless we have the legal right to retain it). You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below);
· object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground;
· request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it;
· request the transfer of your personal information to another party;
You should be aware that if you ask us to stop processing your personal information in a certain way or erase your personal information, and this type of processing or data is needed to facilitate your use of the Website, you may not be able to use the Website as you did before.
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us by emailing to [insert email address].
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
In any circumstances in which you have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us by email to [insert email address]. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
8. MARKETING AND MEMBERS
We do not undertake any direct marketing to visitors to the Website, whether by post or email.
Some members of NWSFA advertise their artwork (or related product or services) via the Website. Details can be found on the “Members” page of the Website. We do not pass on your personal information to any members, however. Therefore, if you wish to find out further information about any of the products of services of any such member, you need to contact the member in question directly (by reference to any contact details given by that member).
Your interaction with individual members whom you have contacted falls outside the scope of this Privacy Policy. This Privacy Policy only applies to the Website, and the NWSFA is not responsible for any websites of its members or any personal information collected from you directly by its members.
9. CHANGES TO THIS PRIVACY POLICY
We keep our privacy policy under regular review and will post any updates on this webpage. This privacy policy was last updated in [insert date].
10. HOW TO CONTACT US AND COMPLAINTS
The NWSFA is the data controller in respect of your personal information collected via the Website. You may contact us with any queries, requests or complaints by email to [insert email address] or by post at [insert postal address]. If you are still unsatisfied, you have the right to make a make a complaint to the Information Commissioner’s Office (see https://ico.org.uk/global/contact-us/).
