Volunteers – Privacy notice

Published: 10 February 2020
Review date: 10 February 2021
Policy owner: Data Protection Officer

The North Yorkshire Police, Fire and Crime Commissioner (the Commissioner), is committed to protecting your personal information.

This Privacy Notice contains important information about what personal details we collect; what we do with that information; who we may share it with and why; and your choices and rights when it comes to the personal information you have given to us.

We may need to make changes to our Privacy Notice, so please check our website for updates from time to time. If there are important changes such as changes to where your personal data will be processed, we will contact you to let you know

This version of our Privacy Policy was last updated on 10 February 2020.

Who are we?

This Privacy Notice is provided to you by the Police, Fire and Crime Commissioner, which is the data controller for your data.

Your personal data – what is it?

“Personal data” is any information about a living individual which allows them to be identified from that data (for example a name, photographs, videos, email address, or address).  Identification can be directly using the data itself or by combining it with other information which helps to identify a living individual (e.g. a list of staff may contain personnel ID numbers rather than names but if you use a separate list of the ID numbers which give the corresponding names to identify the staff in the first list then the first list will also be treated as personal data).  The processing of personal data is governed by legislation relating to personal data which applies in the United Kingdom including the General Data Protection Regulation (the “GDPR) and other legislation relating to personal data and rights such as the Human Rights Act.

The data we may collect about you

Personal Data that we may collect includes:

• Name, Address and any other contact details such as email address and telephone numbers
• Health and Disability
• Emergency contact details
• Banking information 

What is the legal basis for processing your personal data?

The Police, Fire and Crime Commissioner may process for personal data for the following reasons:

• To meet the obligations under the volunteer agreement. This can include making sure that you are paid any expenses which are owed to you.
• To meet a legal obligation, for example to ensure you have the right to live and work in the United Kingdom
• With your consent, in terms of any information you may provide about your health so we might make reasonable adjustments and support you in anyway.

Further information in relation to the use of consent can be found in the Consent statement.  

The Commissioner will comply with data protection law. This says that the personal data we hold about you must be:

• Used lawfully, fairly and in a transparent way.
• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
• Relevant to the purposes we have told you about and limited only to those purposes.
• Accurate and kept up to date.
• Kept only as long as necessary for the purposes we have told you about.
• Kept and destroyed securely including ensuring that appropriate technical and security measures are in place to protect your personal data to protect personal data from loss, misuse, unauthorised access and disclosure.

Sharing your personal data

We may engage the services of commercial companies to store and manage your information on our behalf. Where we have these arrangements, there is always a contract, memorandum of understanding or information sharing agreement in place to ensure that the requirements of the GDPR on handling personal information are met.

There are also occasions were we may be required to share your information with other organisations.

• Sharing of personal information

How long do we keep your personal data?

Personal Data is kept in kept in line with our retention policy.  

How do we keep your information secure

We are committed to ensuring that your personal data is safe. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information that we hold about you. These include:

• Secure work areas
• Information security awareness for our staff
• Access controls on all systems
• Encryption of personal data
• Testing, assessing and evaluating the effectiveness of technical security controls 

Your rights and your personal data

You have the following rights in relation to your personal data:

• Right to be informed
• Right to Access
• Right to Request Rectification
• Right to Erasure
• Right to Restrict Processing
• Right to Data Portability
• Right to Object
• Rights Relating to Automated Decision Making

Find out more about your personal rights  

Further processing

If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.  Where and whenever necessary, we will seek your prior consent to the new processing.

Changes to this notice

We keep this Privacy Notice under regular review

First published: 17 May 2018
Updated 10 February 2020
PCC to PFCC