PRIVACY NOTICE
This Privacy Notice explains how Bone Sarcoma Peer Support (BSPS) collects, uses, stores and handles your personal data. In particular, it explains:
The legal basis for processing personal data
What personal data we collect
How and why we collect your personal data
How we share your personal data
How we store and protect your personal data
Your rights in relation to your personal data
Legal basis
We can only process and use your personal data if there is a legal basis for doing so.
Legitimate interests
The processing of your data is necessary for our legitimate interests.
We have a legitimate interest in collecting, storing and processing personal data to:
Match and connect mentors/mentees
Promote, administer and evaluate a mentoring service
Improve operations
We will use your personal data to purse these legitimate interests in a way that does not materially impact upon your rights, freedom and interests.
Consent
We can collect and process your data if you have given clear consent.
What personal data do we collect
The list below sets out the personal data we may collect from you:
Name
Date of birth
Gender
Ethnicity
Address
Contact details, such as telephone number(s) and email address
Information about your health, in particular that relating to the diagnosis and treatment of your bone sarcoma
Information regarding support needs
Other data provided in the process of matching mentors and mentees
Communication preferences and Cookies ID
How and why we collect and use your personal data
We collect most of your personal data directly from you. We collect this from you when you show an interest being a mentor or a mentee in our mentoring service. We may also collect information from our website.
We use your data for the following purposes:
To communicate with you
To create a profile to match mentors and mentees
To connect mentors and mentees
To promote, administer and evaluate the mentoring service
To improve operations
For record keeping
To comply with our legal obligations
For our legitimate interests
Where we have been given consent
How we share your personal data
We will not share your personal data with another individual, group or organisation except in the following limited circumstances:
Where we are under a legal or regulatory duty to do so
Where it is necessary to do so to enforce our contractual rights
To assist the police or security services with the prevention or detection of crime
Where such disclosure is necessary to protect the safety or security of any persons
Otherwise as permitted under applicable law
With your agreement
How we store and protect your personal data
Your data will be stored securely. Data stored electronically will be kept in files and accounts that are password protected. All devices used to access data will themselves be password protected. We use Microsoft Office 365, which operates within the EU and we are therefore confident will be complying with GDPR and the relevant data processing legislation.
We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a legitimate need to access it. Those processing your information will do so only in an authorised manner and will keep it confidential. In the unlikely event of a breach, we will notify you and the Information Commissioners Office within 72 hours of discovery of the
breach.
We will not hold any personal data longer than is necessary and individuals can request their data be deleted at any time.
Your rights
You have the following rights:
The right to request access to personal data we hold about you
The right to request a correction of your personal data when incorrect, out of date or incomplete
A right to request a restriction to the processing of personal data
A right to object to the processing of personal data or the continued processing of personal data
A right to request that your data be deleted
We will process any request as soon as reasonably practicable. Please bear in mind when making requests that BSPS is formed entirely of volunteers who carry out their work in addition to other commitments. However, we will aim to deal with any request within 30 days.
If you have a complaint regarding any aspect of your personal data, please email hello@peer-support.co.uk.
If you are not satisfied with the outcome of your complaint, you can complain to the Information Commissioner’s Office who may be contacted at https://ico.org.uk/concerns or by telephone on 0303 123 1113.
Bone Sarcoma Peer Support
Email: hello@peer-support.co.uk
Telephone: 0330 133 4314
Last updated 27 May 2021