Personal Data Policy

Who the Trust is
Kinnesswood Development Trust (the Trust) is a private Company Limited by Gurantee.
It is a Community development Trust encouraging & organising sustainable development projects for the benefit of our community.

Personal data held
The Trust holds the names, email addresses & street addresses of Trust members and a wide range of people to enable it to carry out its duties.
There are others with whom the Trust finds it desirable to deal from time to time in the interests of the community and a few who provide services to the Trust.
The data will be retained until the Trust becomes aware that it no longer needs to contact the individual concerned to perform its functions.

Lawful Justification
The data is used almost exclusively to perform the Trust’s functions which are conducted in the interest of its members & the Community.
Even when not, it is used to pursue a legitimate interest of the Trust.
When used to contact those providing services to the Trust it is used in pursuance of a contract.

Rights of data subjects
All individuals have the right to know what data is held about them and to have it corrected if inaccurate.
Application should be made to the secretary who is the Trust’s processor of data.
Formal identification will be needed before the data is released.
All those individuals to whom newsletters are circulated have the option to unsubscribe at any time.
The newsletters will in any event be available on the Trust’s website.

Children
The Trust does not provide any “information society service” as defined in the DGPR.
It has no data for children and does not provide content specifically aimed at, or unsuitable for, children.

Data Security
Data is maintained on a webserver operated by a reputable hosting company.
Access to the database requires detailed technical knowledge and two sets of passwords known only to the webmaster.
The hosting company systems deny access to services after a few failed login attempts and the webmaster is informed of the attempted intrusion.
The Trust will contact all those on whom data is held in the event of a suspected breach.
The Trust does not share any of the data with any other party except as required by law.

International
The Trust does not carry out any cross-border processing.