Data protection statement

DATA PROTECTION POLICY

SCOPE

Blind Veterans UK recognises its legal obligation to comply with the 1998 Data Protection Act and is registered as a data controller under the Act Z6040633 .  Blind Veterans UK has adopted this Data Protection Policy to establish good data protection practices and to reflect its desire to protect the privacy of individuals on whom it holds personal information.

 

RESPONSIBILITY

All staff at Blind Veterans UK are responsible for complying with the 1998 Data Protection Act.  Managers are responsible for supervising their staff and overseeing compliance with the Act.  Blind Veterans UK Nominated Officer for Data Protection (the Head of IS) is responsible for Blind Veterans UK data protection strategy.  Blind Veterans UK Data Protection Officer (the IS Officer) is responsible for advice on best practice.

POLICY

Blind Veterans UK needs to collect and use certain types of information about people with whom it deals in order to operate.  These include beneficiaries and their families, current, past and prospective employees, suppliers, volunteers and others with whom it communicates.  This personal information must be dealt with properly however it is collected and used – whether on paper, in a computer, or recorded on other material. 

 

Blind Veterans UK regards the lawful and correct treatment of personal information as very important to successful operations and to maintaining the confidence of those with whom it deals.  Blind Veterans UK has data protection policies and procedures in place to ensure that its staff treat personal information lawfully and correctly. 

 

To this end Blind Veterans UK fully endorses and adheres to the Principles of data protection, as enumerated in the 1998 Data Protection Act.  Blind Veterans UK has taken steps to ensure that its employees who manage and handle personal information are appropriately trained to do so and supervised.  Blind Veterans UK regularly reviews and audits its data handling processes and procedures for data protection compliance.

 

PRINCIPLES & PROCEDURES

The 1998 Data Protection Act sets out eight data protection principles.  Blind Veterans UK is committed to complying with these principles and all other aspects of the Act and in particular will seek to ensure that all personal data held by it is:-

(i)      processed fairly and lawfully

  • we will seek to ensure that individuals whose data we hold know what we intend to do with their personal information
  • wherever necessary and appropriate we will seek individuals’ consent to our processing of their personal data

(ii)     obtained for specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or those purposes

  • we will seek to ensure that individuals whose data we hold know what we intend to do with their personal information
  • we will update and renew our notification with the Information Commissioner’s Office as appropriate

(iii)    adequate, relevant and not excessive in relation to the purposes for which it is held

  • we will only store and use individuals’ personal data for our reasonable and legitimate activities
    • (iv) accurate and up to date
  • we will always try to ensure the quality of our information
  • we welcome and encourage individuals to inform us if they believe any of our information is inaccurate so that we can update our information sources accordingly
    • (v) not kept for longer than necessary for the purposes for which it is held
  • we will operate a retention policy to ensure that old or surplus personal data is removed from our records after a reasonable time
    • (vi) processed in accordance with the rights of the individual concerned
  • we will seek to comply with individual requests and notices
  • we will provide data subject access to personal information in accordance with the Act
  • we will prevent processing in certain circumstances, if requested
  • we will correct, rectify, block or erase information which is regarded as wrong information, when notified
    • (vii) kept securely to avoid accidental loss, destruction or damage to personal data
  • we will operate appropriate organisational and technical security arrangements in relation to all personal data we hold

(viii)  not transferred out of the European Economic Area (“EEA”) without appropriate safeguards

  • we recognise that personal data needs to be treated with particular care in countries which do not have reciprocal data protection laws
  • we will not transfer personal data outside the EEA without the individual’s consent or suitable safeguards

 

Please contact Blind Veterans UK Data Protection Officer on 0207 616 7983 if you have any questions or comments in respect of this Data Protection Policy.

Chief Executive