The Foundation complies with the General Data Protection Regulation (GDPR). The Data Controller appointed by the Trustees is Mr Gavin Costigan, Chief Executive of the Foundation.
This statement sets out the what the Foundation for Science and Technology is doing to comply with GDPR in relation to the data that we hold about individuals.
What is personal data?
Personal data is digital data that can be used to identify individuals.
What systems do we use for personal data?
Personal data is stored in a database system. Personal data is not accessible from the website.
What data do we hold?
The computer data we hold about individuals or organisations is limited to that which we need to fulfil our role as a membership organisation, to manage our charitable activities, to organise events and to satisfy governance requirements. Financial information such as bank details is held on any organisation or person that pays money to the Foundation, is a supplier to the Foundation or provides banking facilities.
What do we use the data for?
This information is used to manage membership of the Foundation, for non-members who are invited to or attend our events, to administer the Foundation Future Leaders programme, and to account for payments received and record payments made to our suppliers.
Do we share the data?
The information is not used outside of the Foundation except if we are organising a joint meeting with another organisation, in which case invitation and attendee information may be shared on a strictly controlled basis. The Foundation does not sell information to third parties.
Who has access to this data?
Only authorised persons have access to data held by the Foundation.
Where do we store the data?
Data is permanently stored in the cloud using One Drive, and is temporarily accessed on Foundation desktops, laptops and mobile phones.
What data security measures are in place?
Access to data is password protected and individuals have to log on with a unique identifier so that an audit trail exists as to who has accessed data.
What are the rights of individuals and organisations?
Individuals and organisations may request to see what data we hold on them, and they have the right to have any errors corrected.
The consent for the Foundation to use the above personal data is assumed by an organisation’s continued membership of the Foundation, personal membership, membership of the Foundation Future Leaders scheme, or because individuals have agreed to attend or be invited to a Foundation event.
The Trustees take protection of personal data seriously. If there are any questions or concerns, please contact the Chief Executive, Gavin Costigan by e-mail to firstname.lastname@example.org or call 020 7321 2220.
The Foundation for Science and Technology
020 7321 2220 | www.foundation.org.uk
2 December 2020