Data Protection principles
At City Year UK we take your privacy seriously and are committed to protecting your personal information. We endeavour to ensure that your personal data will be processed in accordance with the General Data Protection Regulations and that:
- it will be processed fairly and lawfully.
- it will be obtained only for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or those purposes.
- it will be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed.
- it will be accurate and, where necessary, kept up to date.
- it will not be kept for longer than is necessary for that purpose or those purposes.
- it will be processed in accordance with the rights of data subjects under this legislation.
- technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.
- it will not be transferred to a country or territory outside the European Economic Area.
City Year UK will from time to time collect personal information about you in order to support our charitable purpose. We will not distribute or pass your personal information to third parties unless we have your consent or are required by law to do so.
Donations through the website are transacted through third party services. No financial information is held by City Year UK as a result of a donation made through our website.
City Year UK uses Salesforce to store your data as well as G Suite. Salesforce and Google provide high levels of security and protection. You can find out more about their positions on security at their websites. City Year UK also uses two step verification for user logins.
What are cookies and how are they used?
With these technologies, a website or application can store information on your browser or device and later read that information back. Their main functions are to help secure the website by letting us know if someone tries to access your account or engages in activity that violates our terms. They also tell us when you are logged in to the website. We use this information to understand how people use our website to help improve your experience.
Please also read our Data Protection Policy
Subject access requests
Any member of the public who is a subject of personal data held by City Year UK are entitled to:
Ask for what information the charity holds about them and why.
Ask how to gain access to the information held about them.
Be informed on how to keep the data up to date.
Be informed on how the charity is meeting its data protection obligations.
Please contact us at at firstname.lastname@example.org or write to:
City Year UK
58-62 White Lion Street
0207 014 2680
We will comply as soon as reasonably possible and within no more than one month.
If we refuse to comply we will inform the individual within a month why that is, and that they have the right to complain as below.
If anyone wishes to complain to City Year UK about how their personal information has been processed, how their (GDPR) complaint has been handled, or appeal against any decision made following a complaint they can do so by emailing email@example.com.
The complaints procedure for handling and escalation of these complaints is as follows:
1. Complaints regarding how personal information has been processed should be submitted to the Impact, Data & Evaluation Manager, at the email address above, who will acknowledge receipt within 3 working days.
2. The Impact, Data & Evaluation Manager will review and respond in writing to the complainant as soon as possible and within no more that 28 working days of receipt of the complaint. If an extension is required, this will be with the agreement of both parties and up to a maximum of a further 10 working days.
3. If the complainant remains dissatisfied they may forward your complaint to: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF.