Privacy Notice

Terms of Use
No part of this website may be copied or reproduced without express written consent of the originator.

Privacy Notice
Your privacy is important to HSFA. This Privacy Notice covers what we collect and how we use, disclose, transfer and store your information under the General Data Protection Regulations (GDPR) 2018.

1. Identity of Hertfordshire Schools' FA

If there are any questions regarding this Privacy Policy you may contact Mr A Braithwaite at braithwaitea@jhn.herts.sch.uk
 

2. What information do we collect?

You may visit our site anonymously. If you choose to use the enquiry form on our website, data on behalf of you will be processed.
Basic contact details are collected such as the email address and name of the contact person.
 

3. What do we use your information for?

Any of the information we collect from you may be used for one or more of the following purposes:
a. To answer your enquiry
b. To establish a primary channel of communication with you
 

4. Legal basis

4.1 EU General Data Protection Regulation (GDPR) The processing of your data is based on your consent and is necessary to respond to your request.  If the processing is based on your consent, you may at any time withdraw your consent by contacting us using the contact information in clause 1.

In order to enquire about any HSFA issue, you must provide us with the required personal data. If you do not provide us with all the required information, it will not be possible to respond to your enquiry.

4.2 Children’s Online Privacy Protection Act Compliance   Hertfordshire Schools' FA is in compliance with the requirements of GDPR 2018. We will not intentionally collect any information from anyone under 13 years of age. Our website and services are directed at people who are at least 13 years old or older.
 

5. How do we protect your information?

Hertfordshire Schools' FA does not store any personal identifiable information about you online or using cloud storage unless those organisations comply with GDPR. Google (calendar & contacts) is one such organisation.
5.1 Confidentiality    All data is protected by password access. We do request or keep financial information.

5.2 Transparency    Hertfordshire Schools' FA will keep you informed about changes to the processes to protect data privacy and security, including practices and policies. You may at any time request information on where and how data is stored, secured and used.

5.3 Personal Data breach notification     In the event that your data is compromised, Hertfordshire Schools' FA will notify you and the ICO within 72 hours by email with information about the extent of the breach, affected data, any impact on the Service and Hertfordshire Schools' FA action plan for measures to secure the data and limit any possible detrimental effect on the data subjects.
"Personal Data Breach" means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed in connection with the provision of the service.
 

6. How we use cookies

The Web Host for this website uses cookies but they are not used to identify you personally. Wix state: Our website uses cookies. They help us understand how visitors use our website so we can give you the best experience possible. By continuing to browse this site or choosing to close this message, you give consent for cookies to be used.
 

6.1 Measuring Website Usage    Google Analytics is in use to collect information about how visitors use this site. This provides us with important information that can enable the site to work better. We do not link this information to your name or address.
 

7. Do we disclose any information to outside parties?

Hertfordshire Schools' FA does not sell, trade or otherwise transfer to outside parties any personally identifiable information.
This does not include trusted third parties or subcontractors who assist us in operating our website, conducting our business, or servicing you. Such trusted parties may have access to personally identifiable information on a need-to-know basis and will be contractually obliged to keep your information confidential.
We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety.
 

7.1 Legally required disclosure        Hertfordshire Schools' FA will not disclose the customer’s data to law enforcement except when instructed by you or where it is required by law and will only release specific data mandated by the relevant legal demand. If compelled to disclose your data, Hertfordshire Schools' FA will promptly notify you and provide a copy of the demand unless legally prohibited from doing so.
 

8. Third party services

There is no intention to provide services by third parties. If this situation changes, you will be informed.
 

9. Where do we store the information?

No stored data will be transferred, backed up and/or recovered by Hertfordshire Schools' FA outside of the European Union unless it is held by the GDPR compliant providers disclosed in 5. above.
 

9.1. Personal data location   Data is backed up with Google (calendar & contacts)   https://www.google.com/policies/privacy/
 

10. Access, data portability, migration, and transfer back assistance

You may at any time obtain confirmation from Hertfordshire Schools' FA as to whether or not personal data concerning you is being processed.
You may at any time request a redacted data copy, which you may transmit to another controller of the data. Your data will be delivered within 30 days in an electronic format. Under GDPR, there will be no charge for this information.
 

11. Request for rectification, restriction or erasure of the personal data

11.1. Rectification You may at any time obtain without undue delay rectification of inaccurate personal data concerning you.
 

11.2 Erasure     You may without undue delay request the erasure of personal data concerning you, and Hertfordshire Schools' FA shall erase the personal data without undue delay when one of the following applies:
a. if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b. if you withdraw your consent on which the processing is based, and where there is no other legal ground for the processing;
c. if you object to the processing in case the processing is for direct marketing purposes;
d. if the personal data have been unlawfully processed; or
e. if the personal data have to be erased for compliance with a legal obligation in EU or national law.
 

12. Data retention

12.1. Data retention policy     Configuration Data and System Generated Data will be erased immediately when you request this.
 

12.2. Data retention for compliance with legal requirements    You cannot require Hertfordshire Schools' FA to change any of the default retention periods, except for the reasons linked to compliance with specific laws and regulations.
 

13. Your consent

By using our website, you consent to this Privacy Notice.
 

14. Changes to our Privacy Policy

If we decide to change our Privacy Policy, we will post those changes on this page, and update the Privacy Policy modification date below.
This Privacy Policy was last modified on 29th March 2018.
 

15. Complaint

You may at any time lodge a complaint with a supervisory authority regarding Hertfordshire Schools' FA's collection and processing of your personal data with The Information Commissioner's Office https://ico.org.uk/concerns/