Privacy Notice
Our Obligations
The Seed Potato Organisation (SPO) is the Data Controller of any Personal Data we process about you for the purposes set out in this Privacy Notice.
This privacy notice outlines what personal data SPO collects and processes about you in various situations and how we use your personal data. In short, such situations may be when you interact with this website when you attend one of our events; when you visit our site; when we market to you and any other interaction you have with us and during which we process your personal data.
SPO is committed to protecting the privacy and security of your personal data. We are required under the UK General Data Protection Regulation (UK GDPR) to notify you of the information contained in this privacy notice.
If you have any concerns about SPO’s processing of your personal data or you have a general enquiry in relation to data protection please contact our Privacy Manager at info@seedpotatoorganisation.com .
Personal Data
Personal Data: means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Special Category of Data: means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
When we use the term ‘personal data’ we mean both personal data and special category of data.
Data Processing
Personal Data is collected in several different ways dependent on your interaction with SPO. The table below sets out what personal data we process about you, where we get it from, why we use it, and our legal basis. Please note that your Personal Data will be held on UK servers. We will not share your personal data with any other organisation or third parties without seeking your prior consent. Exceptions to this are:
- where we are required to share your personal data in accordance with law e.g. such as to assist with investigations carried out by the police, other authorities or any regulatory requirement to which SPO is subject;
- where we are undergoing a corporate restructure;
- where we use third parties to undertake certain services on our behalf and in doing so, they require to process personal data in order to do this. If so, we will ensure that adequate arrangements are in place to protect your personal data. These third parties may include: our lawyers, auditors, accountants, cloud storage suppliers, IT infrastructure suppliers, online survey platforms; transcribing and data scanning services.
Data Processing:
Purpose | Personal Data | How collected | Legal Basis |
Membership | Name, email address, telephone number, address, Payment information, Business data. | Direct from you | Performance of a contract. |
To respond to enquiries and requests for information and collect feedback, online or in another form. | Name, email address, telephone number, address, any information you provide to us | Direct from you | Legitimate Interest – it is in our legitimate interest to respond to enquiries, requests, and information within feedback forms to engage with individuals and improve service delivery. |
To organise and manage events | Name, occupation, organisation, email address, telephone number, special dietary requirements, photos, and videos. | Direct from you | Legitimate Interest. |
Data Protection
SPO works hard to protect your personal data and have adopted appropriate technical and organisational measures to keep it safe from unauthorised disclosure, alteration or destruction.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to SPO via the internet; any transmission is at your own risk.
SPO Communications
If you no longer wish to receive communication from SPO via e.g. our newsletter and would like your personal data removed from our database, please e-mail info@seedpotatoorganisation.com or telephone 07767612230.
Data Retention
SPO will keep your personal data for no longer than is necessary for the purpose we obtained it for or until such time that you exercised your right to request that SPO stops processing your personal data (if relevant).
Automated Decision Making and Profiling.
SPO does not make automated decisions about you, or profile your personal data.
International Transfers
From time to time, SPO may transfer limited personal data outside the UK.
Where this does occur, we will inform you of this and put in place appropriate safeguards and any necessary supplementary measures required under Data Protection law to protect your personal data. For instance, SPO ensures that appropriate agreements regarding data sharing are in place with contracted service providers and international partners outside the UK.
Data Subject Rights
We have summarised your rights below. Please e-mail info@seedpotatoorganisation.com to exercise these.
- You have the right to be provided with clear and concise information about what we do with your personal data.
- You have the right to access personal data held by us about you.
- You can seek to restrict our processing of your personal data, ask us to rectify any personal data we hold about you or object to us processing your personal data for the purposes stated above.
- In certain circumstances you have the right to ask us to provide you with your personal data in a structured, commonly used and machine-readable format to allow you (or us on your behalf) to transmit this information to another party. More information can be found at https://ico.org.uk
- In certain circumstances you have the right to ask us to erase the personal data we hold about you. We will consider any such requests in line with UK GDPR. Please note this is not absolute right and there may be circumstances where we choose not to delete all of the personal data we hold about you. More information about your right of erasure can be found at https://ico.org.uk
- If we are relying on your consent, you can withdraw your consent at any time, at which point we shall stop processing your personal data in that way. Please note this does not affect the legality of our processing up to the date of your withdrawal of consent.
- You also have the right to lodge a complaint with the Information Commissioners Office (ICO) if you think that we have infringed your rights. You can find more information about reporting a matter to the ICO at the following link: https://ico.org.uk/
Third Party Links
SPO’s website may, from time to time, contain links to and from the websites of third parties. If you follow a link to any of these websites, please note that these websites and any services that may be accessible through them have their own privacy notices and that we do not accept any responsibility or liability for these notices or for any personal data that may be collected through these websites or services, such as contact and location data. Please check these notices before you submit any personal data to these websites or use these services.
Contact
If you have any questions about this privacy notice please contact us: info@seedpotatoorganisation.com
Changes to Privacy Notice
Last updated: June 2024