Groudle Glen Railway Co. Ltd
General Data Protection Regulations, which came into force on 25th May 2018, requires Groudle Glen Railway Co. Ltd (‘the Company’) to have a policy on why personal information is collected, how it is used and stored and who will use it.
Why do we collect your personal information?:
Personal information is collected and used to:
-Maintain a record of members of the ‘Friends of Groudle Glen Railway’ and to communicate with members by post, email or telephone on matters concerning the operation of the railway and the Friends group.
– Manage subscription payments
– Maintain a record of donations to the railway
– Reward contributors to fundraising appeals
– Contact purchasers of online tickets to the railway regarding their purchase.
The ggr.org.uk website is hosted by 1and1.co.uk and managed remotely by volunteers from the railway. You can find out more about the Privacy and Security principles of 1and1.co.uk sites by visiting: https://www.1and1.co.uk/terms-gtc/terms-privacy .
Membership information for the Friends of Groudle Glen Railway group is held by our secure online provider www.membermojo.co.uk . You can find out more about the Privacy and Security principles of membermojo by visiting: https://membermojo.co.uk/mm/help/privacy .
The railway’s online ticketing service is provided by Ticket Tailor and their associated check-in app Tazotix. You can find out more about the Privacy and Security principles of Ticket Tailor by visiting https://www.tickettailor.com/privacy-policy .
Online payments for the railway are processed by Paypal. For more information on Paypal’s Privacy and Security Policies please visit: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full .
Our volunteer’s online rota system is hosted by findmyshift.co.uk. You can find out more information about the Privacy and Security principles of Findmyshift.co.uk by visiting: https://www.findmyshift.com/privacy-policy .
Our online mailing service is provided by MailChimp.co.uk. For more information on Mailchimp’s Privacy and Security Policies please visit: https://mailchimp.com/legal/privacy
What information do we hold?:
Names, postal and email addresses of Friends of Groudle members along with telephone number of volunteers to the railway.
Who uses this data?:
The Data Controller is the Railway’s Chairman
The Data Processors are:
- The Treasurer (Membership contributions and donations)
- The Secretary (Membership Records, Fundraising records & mailing lists)
- 1and1.co.uk (Website hosting & Maintenance)
- Membermojo (Friends Group Membership Records Management)
- Ticket Tailor.co.uk / Tazotix (Online Ticket Sales)
- Paypal.co.uk (Online Payment Processor)
- Findmyshift.co.uk (Volunteer Contact Details and Rostering)
- Mailchimp.co.uk (Online Mailing List Management)
Where is this information stored:
Electronic & paper records are held by the Company Secretary & The Treasurer, along with 1and1.co.uk membermojo, Ticket Tailor / Tazotix, Paypal , Findmyshift.co.uk and Mailchimp. These parties will keep personal information confidential and not share them with third parties without the express permission of the individual members. The information is kept at the residences of the data processors or their secure registered facilities via online portals.
Retention of Personal Information:
The Railway will store Friends of Groudle Glen Railway members’ personal information for as long as they are members. If a member specifically requests to leave the group, their information will be removed. Members who fail to pay their subscription will be assumed to have left the group and their membership will lapse, however their information will still be held within the system for 8 months to allow late payment and/or re-joining at a later date, unless the member requests it to be deleted. Following this time archived membership information is retained for 24 months before being permanently deleted, unless the member requests it to be deleted.
Consent for data collection and storage:
All members of the Friends of Groudle Glen Railway group are asked for personal information details and for their consent to store this information. People may sign up to the newsletter by providing information via the website and opting in to receive an email newsletter. This data protection policy privacy notice is available on the ggr.org.uk website.
Rights of Individuals:
The General Data Protection Regulations include the following rights for individuals:
- The right to access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to object