Data Protection Policy - Fortrose and Rosemarkie Community Council (F&RCC)
The General Data Protection Regulations cover information about individuals which is held on computer or in a manual filing system, or which is recorded with the intention that it will be part of such systems. The Act applies to people or organisations that use or hold such personal data.
The GDPR are based on the right of the individual (the Data Subject) to know what information is being held about them, and how the information will be used and stored. The GDPR set out principles to ensure that personal data is:
processed fairly and lawfully
obtained only for specified purposes
relevant to the purposes for which it is processed
accurate and kept up to date
not kept for longer than is necessary
processed according to the rights of the Data Subject under the regulations
protected against unauthorised processing, accidental loss or damage
not transferred to areas outside of the European Union (including via websites)
F&RCC holds personal information on volunteers, staff, service users.
F&RCC seeks to comply with both the letter and the spirit of the regulations.
2. Scope of the policy
Volunteer personal records will be kept securely by F&RCC in accordance with its procedures
F&RCC and volunteers, other than the Data officer in the course of their duty, do not have access to information on other volunteers
All personal documents will be kept in accordance with F&RCC procedures compliant with their legal obligations.
Volunteers have the right to see the information held on them by F&RCC Requests should be in writing to the Data Officer and F&RCC will provide a copy of the information within two weeks of receiving the request. No charge is made.
Information about individuals will not be disclosed to any third party outside of F&RCC without the permission of the individual.
Where photographs of volunteers are used to publicise or promote the organisation, permission will be sought from individuals and the photograph used for a specified length of time.
Data officer Chairperson