HSFA Privacy Notice
No part of this website may be copied or reproduced without express written consent of the originator.
Your privacy is important to HSFA. This Privacy Notice covers what we collect and how we use, disclose, transfer and store your information under the General Data Protection Regulations (GDPR) 2018.
1. Identity of Hertfordshire Schools' FA
2. What information do we collect?
You may visit our site anonymously. If you choose to use the enquiry form on our website, data on behalf of you will be processed.
Basic contact details are collected such as the email address and name of the contact person.
3. What do we use your information for?
Any of the information we collect from you may be used for one or more of the following purposes:
a. To answer your enquiry
b. To establish a primary channel of communication with you
4. Legal basis
4.1 EU General Data Protection Regulation (GDPR) The processing of your data is based on your consent and is necessary to respond to your request. If the processing is based on your consent, you may at any time withdraw your consent by contacting us using the contact information in clause 1.
In order to enquire about any HSFA issue, you must provide us with the required personal data. If you do not provide us with all the required information, it will not be possible to respond to your enquiry.
4.2 Children’s Online Privacy Protection Act Compliance Hertfordshire Schools' FA is in compliance with the requirements of GDPR 2018. We will not intentionally collect any information from anyone under 13 years of age. Our website and services are directed at people who are at least 13 years old or older.
5. How do we protect your information?
Hertfordshire Schools' FA does not store any personal identifiable information about you online or using cloud storage unless those organisations comply with GDPR. Google (calendar & contacts) is one such organisation.
5.1 Confidentiality All data is protected by password access. We do request or keep financial information.
5.2 Transparency Hertfordshire Schools' FA will keep you informed about changes to the processes to protect data privacy and security, including practices and policies. You may at any time request information on where and how data is stored, secured and used.
5.3 Personal Data breach notification In the event that your data is compromised, Hertfordshire Schools' FA will notify you and the ICO within 72 hours by email with information about the extent of the breach, affected data, any impact on the Service and Hertfordshire Schools' FA action plan for measures to secure the data and limit any possible detrimental effect on the data subjects.
"Personal Data Breach" means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed in connection with the provision of the service.
6.1 Measuring Website Usage Google Analytics is in use to collect information about how visitors use this site. This provides us with important information that can enable the site to work better. We do not link this information to your name or address.
7. Do we disclose any information to outside parties?
Hertfordshire Schools' FA does not sell, trade or otherwise transfer to outside parties any personally identifiable information.
This does not include trusted third parties or subcontractors who assist us in operating our website, conducting our business, or servicing you. Such trusted parties may have access to personally identifiable information on a need-to-know basis and will be contractually obliged to keep your information confidential.
We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety.
7.1 Legally required disclosure Hertfordshire Schools' FA will not disclose the customer’s data to law enforcement except when instructed by you or where it is required by law and will only release specific data mandated by the relevant legal demand. If compelled to disclose your data, Hertfordshire Schools' FA will promptly notify you and provide a copy of the demand unless legally prohibited from doing so.
8. Third party services
There is no intention to provide services by third parties. If this situation changes, you will be informed.
9. Where do we store the information?
No stored data will be transferred, backed up and/or recovered by Hertfordshire Schools' FA outside of the European Union unless it is held by the GDPR compliant providers disclosed in 5. above.
9.1. Personal data location Data is backed up with Google (calendar & contacts) https://www.google.com/policies/privacy/
10. Access, data portability, migration, and transfer back assistance
You may at any time obtain confirmation from Hertfordshire Schools' FA as to whether or not personal data concerning you is being processed.
You may at any time request a redacted data copy, which you may transmit to another controller of the data. Your data will be delivered within 30 days in an electronic format. Under GDPR, there will be no charge for this information.
11. Request for rectification, restriction or erasure of the personal data
11.1. Rectification You may at any time obtain without undue delay rectification of inaccurate personal data concerning you.
11.2 Erasure You may without undue delay request the erasure of personal data concerning you, and Hertfordshire Schools' FA shall erase the personal data without undue delay when one of the following applies:
a. if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b. if you withdraw your consent on which the processing is based, and where there is no other legal ground for the processing;
c. if you object to the processing in case the processing is for direct marketing purposes;
d. if the personal data have been unlawfully processed; or
e. if the personal data have to be erased for compliance with a legal obligation in EU or national law.
12. Data retention
12.1. Data retention policy Configuration Data and System Generated Data will be erased immediately when you request this.
12.2. Data retention for compliance with legal requirements You cannot require Hertfordshire Schools' FA to change any of the default retention periods, except for the reasons linked to compliance with specific laws and regulations.
13. Your consent
By using our website, you consent to this Privacy Notice.
You may at any time lodge a complaint with a supervisory authority regarding Hertfordshire Schools' FA's collection and processing of your personal data with The Information Commissioner's Office https://ico.org.uk/concerns/