This Privacy Notice will help you understand how we collect, use and protect your personal information when you choose to sign up to DRC for any of our projects, activities or services. Please ensure you read this notice and any other similar notice we may provide to you from time to time when we collect or process personal information about you.
Who we are
The Birmingham Disability Resource Centre (known as Disability Resource Centre or DRC) (‘Company’) is a ‘data controller’ and gathers and uses certain information about you. DRC’s Registration Number is 3738249 and our registered address is Unit 18, ACE Business Park, Mackadown Lane, Kitts Green, Birmingham, B33 0LD.
Data protection principles
We will comply with the data protection principles when gathering and using personal information, in-line with General Data Protection Guidelines as we are required to do so by law. The personal data we collect from you will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are being processed.
About the information we collect and hold
When you sign up to any of our projects or use our services where your personal data is required, we will provide you with a programme/service specific Data Protection Privacy Notice which outlines exactly what information we will collect, hold, how and why we do so (including the relevant legal basis), how we use it, where it is stored and with whom it may be shared.
We do not collect any personal information about you through our DRC website.
How long we keep your information
We keep your information for no longer than is necessary for the purposes for which the personal information is processed. The Schedule attached to the programme/service specific Data Protection Privacy Notice you will receive when engaging with us, states how long we store your information for and the reasons for this.
You have rights set out in law concerning your personal information. These include:-
- A right of access to a copy of the personal information we collect;
- A right to have inaccurate data rectified;
- A right to request that your personal data be deleted in certain circumstances;
- A right to restrict the processing of your personal data;
- A right to transfer your personal data from one controller to another;
- A right to object to processing of your personal data , in certain circumstances, that is likely to cause or is causing distress;
- A right to claim compensation for damages caused by a breach of the GDPR.
Please contact our Data Protection Officer (DPO) Nikki Chatwin who can be contacted by phone on 03030 40 20 40 or email email@example.com if (in accordance with applicable law) you would like to correct or request access to information that we hold relating to you or if you have any questions about this notice. You also have the right to ask our Data Protection Officer for some but not all of the information we hold and process to be erased (the ‘right to be forgotten’) in certain circumstances. Our Data Protection Officer will provide you with further information about the right to be forgotten, if you ask for it.
Keeping your personal information secure
We have appropriate technical and organisational measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
How to complain
We hope that our Data Protection Officer can resolve any query or concern you raise about our use of your information. If not, contact the Information Commissioner at ico.org.uk/concerns/ or telephone: 0303 123 1113 for further information about your rights and how to make a formal complaint.