Data protection and privacy

CycHull is a voluntary organisation based in Hull. We campaign for a cycle friendly city and, in doing so provide information about cycling in the local area as well as supporting all types of active travel and road safety initiatives. 

CycHull respects your privacy and is committed to protecting your personal data. This document explains how we process your personal data and how, in doing so, we comply with our legal obligations to you. We may amend this information from time to time.

Identity and contact details of the data controller

The Data Controller is the current Website and Social Media manager for CycHull and can be contacted at cychullorg@gmail.com.

Purpose and lawful basis for processing your data

We will process your personal data for the purpose of including you in our campaign. If you have consented, we will add you to our email list so we can send you information about our campaign. Our lawful basis for processing your personal data is covered under UK GDPR by Legitimate Interests, article 6 (1) (f):

“processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.”

Or by Consent, article 6 (1) (a):

“the individual has given clear consent for you to process their personal data for a specific purpose.” 

Categories of personal data  

Petition data:

  • CycHull will hold only necessary personal information about individuals who have signed paper or online petitions on cycling matters for the purposes of campaigning on specific issues.

  • Petition data may include:

  1. Name.

  2. Email address.

  3. The nature of the petition signed by the individual.

  4. Consent to be contacted by CycHull.

Enquiry data:

  • CycHull will hold only necessary personal information about individuals who have made other enquiries.

  • Enquiry data may include, depending on the information supplied by the enquirer:

  1. Name.

  2. Postal address.

  3. Email address or other online identity (e.g. Twitter handle).

  4. Telephone number (landline and/or mobile).

  5. The nature of the enquiry made by the individual.

Other personal data:

  • The other possible categories of personal data we will process are:

  1. Name.

  2. Email address or other online identity such as Twitter handle.

  3. Phone number.

  4. Full address (or postcode as appropriate).

  5. Any payments you have made to us.

  • We may also keep a record of petitions or campaigns to which you have added your name.

  • PayPal account details will be recorded only for the following purposes:

  1. Processing standing order instructions or other payments you may make to us.

  2. Making payments to you in respect of money we owe you.

Only the treasurer and authorised account signatories will have access to these details.

Any recipient or categories of recipients of the personal data

We will not share your personal data with anyone else.

Details of transfers to third country and safeguards

We will store the personal data you have provided in a Google Sheets document. Google’s servers are based in the USA. For information on how they comply with the GDPR and the US-EU Privacy Shield please read Google Cloud & the General Data Protection Regulation. If you have consented to being added to our emailing list then your name and email address will be stored in our MailChimp account. MailChimp’s servers are based in the USA. For information on how they comply with the GDPR and the US-EU Privacy Shield please read their Privacy Policy.

Retention period or criteria used to determine the retention period

We will retain your personal data as a CycHull supporter until our campaign ends. You can request that we remove your personal data from our supporter list at any time. Please contact us if you wish to do so.

RIGHT OF ACCESS REQUESTS

Any request for release of an individual’s data shall be responded to within the one month permitted by the GDPR and in accordance with the provisions of those Regulations.

 OTHER REQUESTS (including opt-outs)

Any request not to use an individual’s data for the purposes of CycHull (other than to keep a record of membership) shall be complied with within the “reasonable period” required by the Act, which we consider to be 14 days. If you have consented to be added to our email list you can unsubscribe from this at any time following the unsubscribe link in the email footer.

The rights available to individuals in respect of the processing

  • We will process all personal data in line with your rights, which are:

  1. The right to be informed.

  2. The right of access.

  3. The right to rectification.

  4. The right to erasure.

  5. The right to restrict processing.

  6. The right to data portability.

  7. The right to object.

  8. Rights in relation to automated decision making and profiling.

  9. The right to withdraw consent at any time, where relevant.

  • Please contact us if you wish to exercise any of these rights.

You have the right to complain to the Information Commissioner’s Office if you think there is a problem with the way we are processing your data. The personal data we hold about you was provided by you. It did not come from publicly accessible sources. The provision of personal data is not part of a statutory or contractual requirement or obligation. Without your personal data we would not be able to contact you about our campaigns or count you as a supporter of CycHull.

We do not make use of any automated decision-making processes.

If you submitted personal data to us via a webform, this will be stored on the web-hosting platform and email server and will be held in accordance with the retention period(s) described above which in any case shall be no longer than two years after your membership has ended or in the case of an online purchase, two years after the transaction was processed.