Green Aspirations Scotland CIC is a community interest company, or social enterprise, committed to helping people, whatever their background, to get out into nature. This privacy notice explains how we use any personal information we collect about you when you subscribe to our news updates or book to participate in our activities.
Green Aspirations Scotland CIC is serious about protecting your privacy and maintaining the security of any personal information collected or received from you. When you submit information to us, this is kept confidential and used to support our activities. The General Data Protection Regulation (GDPR) and the Data Protection Act (DPA) 2018 in the UK set out the rules for processing personal data. This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by Green Aspirations. We are committed to processing data lawfully, fairly and transparently, to retain data only until it is necessary, and to protect it from unauthorised use.
Personal and sensitive data
Personal data only includes information relating to persons who: can be identified or who are identifiable directly from the information in question; or who can be indirectly identified from that information in combination with other information. Personal data may also include special categories of personal data or criminal conviction and offences data. This is sensitive data and should be dealt with differently. We collect this type of data from employees and sessional workers only.
Green Aspirations Scotland CIC was established as a Community Interest Company in 2013, designed as a social enterprise aiming to provide benefit to the community. We are committed to openness and honesty in all our activities. We collect and store personal data only when it is necessary to deliver our activities. For other activities, such as recruitment, business development, marketing and human resource management, we collect personal data necessary to conduct and grow our business and to fulfil our legal obligations.
Activities when we collect personal data
We collect information about you when you subscribe to our news updates or when you book to participate in any of our activities. We also collect information if you complete any surveys or provide any feedback. Website usage information is collected using cookies.
What we collect
For our activities, we collect and process the following information about participants:
Contact details (normally including name, email address, telephone number and address).
For activities involving children, we also collect age information.
We might also ask for additional information which is important for our activity leaders to know, such as allergies or additional requirements.
If we’re running a survey, we’ll ask about your opinions about our activities.
The platforms we use
Our website is based on the Wix platform, which collects and stores personal data for us. Bookings for events and other purchases are made through this platform. The Wix privacy statement can be found here.
Our website uses web analytics (Google Analytics). However, it only collects anonymised statistical data that does not allow the identification of any individual. Google’s privacy statement is here.
For some bookings, including our Wee Skelfs holiday club, we use the Bookwhen platform. Bookwhen is responsible for the data we collect via the platform. You can access the Bookwhen privacy statement here.
Information we collect through surveys is generally stored on cloud servers managed by our survey software provider, SurveyMonkey. Access is password protected. Our survey software provider is responsible for preventing data breaches by maintaining and updating the security of their IT system. You can find SurveyMonkey’s privacy notice here.
We also store, share and transfer information using Dropbox, which offers advanced security features as discussed on this page. Access is password protected.
Green Aspirations Scotland CIC will not keep personal data longer than necessary to fulfil its legal or contractual obligations.
How we use the information
We collect information about you in order to process your order, manage and deliver our activities appropriately, and, if you agree, to email you about other news and/ or activities we think may be of interest to you. The information you may provide about your children is used only to ensure we can provide a safe service. We use your information collected from the website to personalise your repeat visits to our website. We do not pass your information to any other companies.
We would like to send you information about our news and/ or activities which may be of interest to you. We will ask for your consent to do this. If you have consented to receive marketing emails, you may opt out at any time. You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please email us at email@example.com. We do not market directly to children.
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. You can find out more about Cookies on http://www.aboutcookies.org/ or http://www.allaboutcookies.org/. You can set your browser not to accept cookies. The above websites will tell you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.
We will not share personal information with any third-party organisation, unless we are obliged to do so by contract, by law, or the disclosure is ‘necessary’ for purposes of national security, taxation and criminal investigation, or we have your consent.
Employees, sessional workers, volunteers and job applicants
When applying for an open position at Green Aspirations, we will process your information in ways that would be reasonably expected. All CVs will be deleted within 30 days from the end of the hiring period. Should we wish to keep your CV for future job opportunities, we will obtain your consent via email. Whether you are an employee or job applicant, you have the following rights with respect to your personal data: access, rectification, erasure, withdrawal of consent, objection to processing and lodging of complaints to supervisory authority.
We may collect data relating to criminal conviction and offences for employees and sessional workers who are working with children and protected adult groups.
Employee data will be kept for a period of six years after cessation of employment, unless otherwise requested by the employee. Ex-employee data will be periodically reviewed and deleted when appropriate.
Your legal rights
When you participate in our activities, you have a legal right under the GDPR to request access to any information that we hold that can be identified as yours (right to information and access). This request should be put in writing to the details below:
Green Aspirations Scotland CIC
East Steading, Cashley Farm
We will respond within 30 days of receiving your request. The GDPR details a number of exemptions from disclosure and, should we be unable to fulfil your request, we will provide a full explanation in writing.
You have a right to data portability. Therefore, when providing data to you, we will do so in a commonly-used and machine-readable format (e.g. a csv spreadsheet). You have the right to ask us not to process your personal data for marketing purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at firstname.lastname@example.org. The GDPR also gives you the right to erase your data and/or restrict its processing. Please get in touch at email@example.com should you wish to exercise these rights.
Last updated: August 2021