We may change this policy from time to time by updating this page. This policy is effective from 25th May 2018.
Processing on the legal basis of ‘legitimate interests’ (Article 6.1(f) of the GDPR)
In simple terms the legal basis of ‘legitimate interests’ means that the processing is necessary to provide the benefits and services BODA provides, be it application to become a member of the association, administration of your ongoing membership or a general enquiry.
In order to do this we may collect and keep a record of personal data about you from our website, telephone conversations, emails and written communications. When you use our website, you may be required to provide certain information such as your name, address, email address, telephone number and car details. We may also ask you for additional information such as mobile phone number, fax, credit card details, as required under the circumstances. Please let us know if any of your personal data changes or is inaccurate so that we may keep our records up-to-date.
We may use the personal data we collect from you in various ways, including:
- to process any orders placed by you;
- to process and administer your membership
- to communicate with you;
- for maintaining our internal records;
- to provide members with details of other members in BODA
- to improve the quality of our service; and
- to protect our website and systems against unauthorized access.
Should you choose to become a member only your name, phone number, email address, membership number and car details will be available for display in the password-protected ‘members area’ of our website.
Your personal data may be circulated to officers of the association for purposes such as informing the association’s section secretaries of new members in their areas, introducing you to your local sections of the association, or keeping you informed about news relevant to BODA or Bristol Car ownership. However, we do not share your personal data with any third parties for marketing purposes and never will.
Processing on the legal basis of ‘consent’ (Article 6.1(a) of the GDPR)
In certain circumstances we may ask for your specific permission (‘consent’) before processing your personal data. In these circumstances we will provide notice of the exact nature of the processing and give you a genuine choice to accept or refuse.
Should you choose to accept (‘consent’) to such processing you then have the right to withdraw your ‘consent’ by informing us that you no longer give permission for your personal data to be used in this way.
Retention of personal data
Unless there are overriding legal requirements, we retain your personal data only for as long as necessary to complete the service requested.
Your data will be completely deleted from the database and website:
- Following formal resignation from the club.
- Lapsed members will be eliminated altogether from the database and website after 18 months of being in arrears with payment of their membership fee.
Keeping your personal data secure
We are committed to ensuring that your information is kept secure. In order to prevent unauthorised access or disclosure we have put in place appropriate technical and organisational measures to safeguard personal data from loss, misuse, unauthorised access, disclosure, alteration, damage or destruction.
In respect of data collected from our website, we use standard technology called ‘cookies’. Cookies are small pieces of information that are stored by your browser on your computer’s hard drive. We need this information to identify you and to store information about your browsing preferences between visits. This helps us to improve our service to you. Although most browsers automatically accept cookies you can usually change your browser to prevent cookies being stored. If you do turn cookies off, however, this will limit the service that we are able to provide to you.
Personal data transfers
The association does not transfer the personal data it collects to any other entity outside of the EEA.
Your data protection rights
Under GDPR you have certain rights with regards to the processing of your personal data. If you would like to exercise any of these rights or need further information please contact the association:
Address: Co Secretary, Bristol Owners & Drivers Association, The Old Sawmill, Shawbridge St, Clitheroe. BB7 1LY.
Telephone +44 473 431378
These rights are summarised below.
Right of access
You may request details of personal data that we hold about you including:
- a description of the personal data, the purposes for which it is being processed, whom it may be shared with and how long it is kept for
- information on your rights of rectification, erasure, restriction and objection as described below
- existence of automated decision making where relevant
- Please note that the association does not use automated decision making
- transfer safeguards where relevant
- Please note that the association does not transfer the personal data it collects to any other entity outside of the EEA
Right of rectification
You have the right to have inaccurate personal data rectified without delay.
Right to erasure
Under some circumstances you have the right to request the erasure of your personal data without undue delay.
- Withdrawal of consent where consent was basis of collection
- No longer necessary for purposes collected
- No overriding ‘legitimate interest’ grounds
Right of restriction
You have the right to ask us to restrict the processing of your personal information under the following circumstances
- Accuracy is contested
- Processing is unlawful but you oppose deletion and request restriction instead
- Your personal information is no longer needed by the association but you require it to be kept for establishment, exercise or defence of legal claims
- Pending a right to object action (see below)
Right to object
You have the right to object to processing of your personal information on grounds relating to your particular situation or circumstances.
You have the right to object to direct marketing.
Right to portability
You have the right to have your personal data that we have collected on the legal basis of ‘consent’ transferred to another entity in a machine-readable format.
Right to lodge a complaint with a Supervisory Authority
You have a right to lodge a complaint with the Supervisory Authority in the country of your place of residence or work. The Supervisory Authority in the UK is the Information Commissioner’s Office (ICO).