In recruiting Honorary Representatives (Hon Reps) and during your voluntary service with us, the OA collects personal data from you. The OA as data controller processes your information in accordance with the Data Protection Act 2018. If you have any queries about any of the information below, please contact the Data Protection Officer , Gary Shipsey, on help@protecture.org.uk.
We process the majority of your data on the basis of legitimate interest, to allow you to fulfil the role of Hon Rep, acting on behalf of the OA, and for which you have volunteered. The application form includes questions about your personal health and any criminal convictions, as these may affect your ability to volunteer. You may subsequently provide us with further health information. Such information is classed as special category and you will be asked for your consent for us to hold this information. You can withdraw that consent at any time, but if you do so it will be necessary for us to review with you your role, to ensure that your health and safety, and that of our beneficiaries, is not jeopardised.
The OA will, in certain circumstances, share your data, including medical information, with our insurance broker and provider. We will, wherever possible, inform you and seek your consent before doing so. Please contact us if you wish to know more about this.
The OA as Data Controller will:
The OA database is held on Salesforce; their terms of service and privacy policy can be found on their website https://www.salesforce.com/company/privacy/.
Salesforce is a US based company, but has introduced binding corporate rules and the EU standard contractual clauses into its agreement with us, as well as self certifying under the EU-U.S. Privacy Shield, to ensure it complies with GDPR standards in protecting your data.
Records of payments to you, ie refund of expenses incurred in the course of your role, will be retained for seven years. These will include your bank details. This information will be stored both in hard copy and electronically on Financial Force, a US based accounting system. Financial Force has self certified as complying with the EU-US Privacy Shield; their privacy policy may be found here:
https://www.financialforce.com/privacy/privacy-statement/. All data entered into Financial Force is stored with Salesforce.
You have the right to: