Data protection procedures of 304 Panzergrenadier LHG
As of 27th November 2020
This data protection policy will outline our commitments to hold and protect our members private information. It will outline our procedures and provide details on how we ensure our policy is upheld as an organisation, ensure we protect the rights and privacy of individuals, and comply with the law, when collecting, storing, using, amending, sharing, destroying or deleting personal data. the leading officers of the group members are responsible for overseeing activities and ensuring this policy is upheld.
Our definition of personal data refers to personal information about a person which is identifiable, such as a first name and surname; home address; email address.
identification or driving licence; phone numbers; doctors address; medical information and photos.
We will only collect, store and use data for:
- purposes for which the individual has given explicit consent,
- purposes that are in our group’s legitimate interests,
- contract with the individual whose data it is,
- to comply with legal obligations, or protect someone’s life
The Group will need to keep personal data about its members and supporters who may attend events or group activities, emergency contacts or for sending information is the main purpose, but medical conditions and any information relating to being banned from owning any firearms will also be important information for group safety.
We will collect, store, use, amend, share, destroy or delete personal data only in ways which protect people’s privacy and comply with the General Data Protection Regulation (GDPR) and other relevant legislation
We will provide individuals with details of the data we have about them when requested by the relevant individual. as well as delete data if requested by the relevant individual, unless we need to keep it for legal reasons.
We will not share personal data with third parties without the explicit consent of the relevant individual, unless legally required to do so. the officers (senior members) need to be in contact with one another in order to run the group effectively and ensure its legal obligations are met.
Contact details will be shared amongst the group. Senior members will not share each other’s contact details with anyone outside of the group or use them for anything other than group business, without explicit consent.
General procedures
- Data will be stored securely. When it is stored electronically, it will be kept in password protected files. When it is stored online in a third party website (e.g. Google Drive) we will ensure the third party comply with the GDPR. When it is stored on paper it will be filed carefully in a locked filing cabinet.
- When we no longer need data, or when someone has asked for their data to be deleted, it will be deleted securely. We will ensure that data is permanently deleted from computers, and that paper data is shredded.
- We will keep records of consent given for us to collect, use and store data.
- Members will not share each other’s contact details with anyone outside of the group or use them for anything other than Group business, without explicit consent.