Your Personal Data
What is Personal Data?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data in the UK is governed by the General Data Protection Regulation (GDPR) and the Privacy and Electronic Communications Regulation (PECR).
Who we are and what we need
Serve Afghanistan will be the ‘Controller’ of the personal data you provide to us. Our contact details are below. We only collect basic personal data about you which does not include any special types of information or current location based information. This does, however, include name, mailing address, email etc.
Serve Afghanistan complies with its obligations under the PECR and GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
Why we need it
We need to know your basic personal data in order to provide you with information about the work of Serve Afghanistan, our various projects, and the people whose lives are impacted by them. This may, from time to time, include requests for various types of information or support, or informing you of relevant events.
If you support the work of Serve Afghanistan financially we need your data to thank you and to process Gift Aid applications or equivalent tax notifications if you are outside of the UK.
We need to communicate with you if you have a particular partnership relationship with Serve Afghanistan, for example in seconding personnel or funding projects.
We will not collect any personal data from you that we do not need in order to provide and oversee this service to you.
The legal basis for processing your personal data
Your data is processed under the conditions of GDPR Article 6, 1(f) whereby processing is ‘necessary for the legitimate interests of the data controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject’. Serve Afghanistan processes data for the purposes of keeping its supporters informed about the work of the organisation, its various projects, and the people whose lives are impacted by them. These supporters either have a historical interest in the work of Serve Afghanistan, often due to personal links or involvement in Afghanistan, or have signed up to receive information about the work and consented to the processing of personal data under the terms of our Privacy Statement and this Policy. We do not do mass mailings or cold calling.
It is in the legitimate interests of Serve Afghanistan to keep supporters informed, raising prayer, personnel and financial support. We believe that in so doing, supporters feel informed, inspired, connected to, and part of the work of Serve Afghanistan. Without prayer, people and funding Serve Afghanistan would cease to operate and therefore cease to benefit the lives of thousands of people in Afghanistan.
For electronic communications we ask for your explicit consent to store your name and email address for the purposes of communicating with you about our work. This consent is given via the sign up forms on our website.
We do not believe that email and postal communications from Serve Afghanistan are intrusive as they are infrequent, and an ‘opt-out’ procedure is included in all mailings.
What we do with your data
Your personal data will be treated as strictly confidential, and all the personal data we process is processed by our staff. No third parties have access to your personal data unless the law allows them to do so. We will only share your data with third parties with your consent. We have a Data Protection regime in place to oversee the effective and secure processing of your personal data.
How long we keep it
Your data will be kept with us until you notify us that you no longer wish to receive information from us. You can unsubscribe at any time via email or our website, or in writing to Serve Afghanistan, c/o UHY Hacker Young, 6 Broadfield Court, Broadfield Way, Sheffield S8 0XF, UK.
What are your rights?
If at any point you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted. You have the right to object to the processing of your personal data. If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Protection Officer who will investigate the matter. You can contact our Data Protection Officer via firstname.lastname@example.org. Please address your email to the Serve Data Protection Officer.
If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law you can complain to the Information Commissioner’s Office (ICO).
You can contact the Information Commissioners Office on +44 (0)303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF, UK.
Transfer of Data Abroad
Because the majority of our office functions are based in Afghanistan your personal data may be held on secure servers which can be accessed by us from Afghanistan, or be held securely on data drives in Afghanistan. We have strict data security policies and ensure that all staff comply with these. Your data is accessible by a very small number of trusted staff only, and processed within the constraints of our policies.
If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
Our contact details
UK Charity Registration Number 1105086. UK Company Registration Number 4759091
Registered Office address: c/o UHY Hacker Young, 6 Broadfield Court, Broadfield Way, Sheffield S8 0XF, UK