Data Privacy Notice
1. Introduction
This Data Privacy Notice is made available after the change in UK law and the General Data Protection Regulation (‘GDPR’) that was introduced on 25 May 2018.
2. Who we are
‘Bird’ is a trading name of Hannah Massarella. The designated Data Controller under data protection legislation and regulations is Bird. The Data Protection Officer (DPO) is Hannah Massarella.
3. Your personal data – what is it?
Your personal data is defined as any information that can be used to identify you from it, either used on its own or along with other information. Data may be collected by various means including through public domain sources including the web and social media, personal contact and in the course of our work with you.
4. Our obligations to you
We meet our obligations to you under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure; and by ensuring that appropriate technical measures are in place to protect personal data.
5. What do we use your data for?
We use your personal data for the following purposes:
- Corresponding with individuals about coaching sessions
- Communicating about services available to clients and their staff
- Keeping individuals up to date on upcoming events
- Supporting individuals around wellbeing and resilience through our weekly blog
6. What is the legal basis for using your personal data?
The legal basis for using your data is:
- your explicit and informed consent; and/or
- for delivering our obligations to you as per a contract between us; and/or
- other legitimate interests including the processing of data for marketing, business
- development, statistical and management purposes.
7. Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with third parties with your explicit and informed consent. We will never sell your data to a third party for marketing purposes.
We may use third party software providers to provide services to you including cloud
based systems for marketing, accounting and electronic communications. Third party providers are only allowed to process personal data for specified purposes and in accordance with our instructions. Data may be sent outside of the European Economic Area for these purposes.
8. How long do we keep your personal data?
We keep data while it is still current and needed, and/or until you withdraw your consent.
9. Your rights and your personal data
You have the following rights with respect to your personal data:
- The right to request a copy of your personal data held by Insight Facilitation UK about you, such request to be answered within a month of the date of request;
- The right to request correction to any personal data if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where it is no longer necessary to retain such data;
- The right to withdraw your consent to the processing at any time;
- The right to request a copy of your personal data and where possible, to transmit that data directly to another data controller,
- The right, where there is a dispute in relation to the accuracy or processing of your
- personal data, to request a restriction is placed on further processing;
- The right to lodge a complaint with the Information Commissioners Office.
10. Data security
We take appropriate technical and organisational measures to ensure the security of the data that we hold. In the event of any breach we will inform you promptly.
11. Further processing
If we wish to use your personal data for a new purpose, not covered by this Data Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
12. Contact Details
To exercise all relevant rights, to raise a query or make a complaint please in the first instance, contact the Data Protection Officer (DPO) (hannah@wearebird.org)
13. Information Commissioners Office (ICO)
You can contact the Information Commissioners Office on 0303 123 1113 or via email, or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.
18 January 2022