On May 25th 2018 the EU-wide Data Protection laws get a significant boost (https://www.eugdpr.org/key-changes.html).
Our Data Protection Policy was last updated in 2011 and, we think, is already protecting your data in all the important ways. We're checking the policy at the moment, if you have any feedback on it please email Tom.
One notable thing is that while the policy suggests there is a fee for dealing with any requests to delete data I can assure you that fee will be absolutely zero for any reasonable request, the wording just comes from the current data protection laws to allow us to claim back unreasonable costs.
Furthermore, if you are in any way uncertain about who to contact with regards to deleting data we might hold on you please send any requests to firstname.lastname@example.org
As a summary:
- The only data we collect on you is collected as part of our sign-up processes. When you apply to perform, set up a stall, volunteer or display your artwork we ask for your contact details so we can talk to you about the way(s) in which you want to take part in the Winter Fair.
- Data we collect has a limited lifespan. As per our current policy we clean up data every two years.
- Data we collect has a limited purpose. We may reach out to you with a reminder that the application process is coming up again or chase you up with an invoice if one is outstanding but we do not send unsolicited communications.
- We keep your data secure. Only people who need access, this is normally just the committee members reponsible, are granted access to the email lists derived from our applications process.
For people that way inclined, or just local traders concerned about the topic, I am keeping a keen eye on the updates to / replacement of the Data Protection Act 1998 (https://services.parliament.uk/bills/2017-19/dataprotection.html
). If you want to have an in-depth discussion about it or the philosophy behind it I
would also be very much up for that.