1. Policy

Speyside Community Car Sharing Scheme (herein referred to as ‘SCCSS’ or ‘The Scheme’) provides a transport service for people who may be elderly, infirm or socially isolated. This privacy policy explains how we use any personal information we collect about you when you join The Scheme.

2. Principles

Article 5(1) of the General Data Protection Regulations requires that personal data shall be:

a. processed lawfully, fairly and in a transparent manner in relation to individuals (‘lawfulness, fairness and transparency’);

b. collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes (‘purpose limitation’);

c. adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);

d. accurate and, where necessary, kept up to date (‘accuracy’);

e. kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (‘storage limitation’);

f. processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).

Article 5(2) adds that:

The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).

2.1. What information do we collect about you?

We collect information about you when you register with us and when you contact us to make use of our services. We also collect information when you voluntarily complete user surveys and provide feedback about your experiences of our services. Website usage information is collected using cookies.

2.2. How will we use information about you?

We collect information about you to enable us to assess your eligibility to join The Scheme, and to provide you with our transportation service. We use your information as it is supplied to us in writing on your membership form to assess your eligibility to join The Scheme, and we use the verbal information you supply to our telephonists to arrange transportation for you.

2.3. Access to your information and correction

You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email us or write to us using the contact details at the end of this privacy policy. You should allow up to 14 days for this information to be provided.

We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information if you believe it to be inaccurate.

2.4. Cookies

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. For further information visit www.aboutcookies.org or www.allaboutcookies.org.

You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function as a result.

2.5. Other Websites

Our website contains links to other websites. This privacy policy only applies to this website so when you link to other websites you should read their own privacy policies.

2.6. Retention Period

Personal information will be stored securely for the duration of a person’s membership of The Scheme. If a member leaves The Scheme, their personal data will be erased from our records. A person also has the right to request erasure, and as such this will terminate their membership.

2.7. Changes to our privacy policy

We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last updated on 25th May 2018.

3. Specified Objectives

• To inform individuals about the collection and use of their personal data. This is a key transparency requirement under the GDPR.

• To provide individuals with information including: our purposes for processing their personal data, our retention periods for that personal data, and who it will be shared with.

• To provide privacy information to individuals at the time of collecting their personal data from them.

• To provide concise, transparent, intelligible, easily accessible information on the use of personal data in clear and plain language.

4. Justification

This policy and the related procedures have been drawn up in accordance with current legislation and principles derived from the following:

• Data Protection Act 2018

• General Data Protection Regulation