Green New Deal UK

Privacy policy

Website

Green New Deal UK is committed to keeping your personal information secure and to being transparent about how we collect and use your data so you can have confidence when learning about our work and supporting us.

The purpose of this policy is to help you understand what personal information Green New Deal UK collects, how we use it and what your rights are. We take care to ensure that we use your information in accordance with all applicable laws concerning the protection of personal information.

This policy applies to:

Green New Deal UK Ltd (GND UK) (Registered company number 12034800) whose registered address is:

Oxford House

Derbyshire Street

Bethnal Green

E26HG

GND UK is registered as a data controller with the Information Commissioner for the United Kingdom This policy applies to all the pages hosted on this site and other services GND UK runs. It does not apply to other organisations to which we may link and whose privacy policies may differ, or to constituent groups of GND UK.

Please read the following policy to understand how your personal information will be treated. It may change from time to time and you will be updated if so.

1. The Information Green New Deal UK collects about you and how it is collected and used.

GND UK collects personal information about you in a number of ways:

When you support us by:

  • Signing one of our petitions
  • Signing up to receive our newsletter
  • Making a donation to Green New Deal UK
  • Engaging with our social media and digital advertising
  • Joining our volunteer communities

As well as:

  • When you apply for a job at Green New Deal UK
  • When you visit our website
  • When you contact us through the website

To comply with UK data protection rules GND UK will always ensure we have legal justification for collecting and using your personal information.

The legal basis that we rely on will depend upon the circumstances in which we collect and use your personal information. In almost all cases, our processing of your personal information will fall into one of the following categories:

  • Where you have provided your consent to allow us to use your data in a certain way.
  • Where it is necessary for us to process your data in order to comply with a legal obligation.
  • Where it is in our legitimate interests to contact you in order to raise funds and achieve our campaign objectives. Where we rely on a legitimate interest to use your information, we will always ensure that this is done in a way so as not to be intrusive or cause distress, and that respects your rights.
  • Where it is necessary for us to process your data in order to carry out the performance of a contract with you.

1.1 People Who Support Us

How we collect consent via petitions

Green New Deal UK requires an email address to be captured on petition forms. This information is used to verify your petition signup. 

On some petitions Green New Deal UK may provide an option for supporters to give additional consent for us to contact them for the purposes stated in the text on this page. Supporters may opt out of this contact at any time, via a link included in every email Green New Deal UK sends; or via contacting us through the contact information available on our website.Where petitions do not provide an additional consent option to be contacted, supporters information will only be used to verify their signup and the personal data is not processed for any other purpose.

How we collect your data

Green New Deal UK obtains personal information from you when you engage with us in the ways outlined above.

In most circumstances, Green New Deal UK will only ask for your name and contact details (plus payment details if you are joining or donating). Sometimes we may ask for additional information where it may either help us in our campaigns or help us keep our communications relevant to you. We may also use your name and contact details to check against sources, such as Royal Mail’s National Change of Address and the BT Operator Services Information System (OSIS) file, to ensure we have the most up to date contact details for you.

We may occasionally supplement your data with other publicly and commercially available information where it meets GDPR standards. This may include information such as your parliamentary constituency or the characteristics of your local area to inform campaigning and requests for support to ensure our communications are relevant. We may store relevant information about you that you voluntarily share with us.

We will only collect sensitive personal data where absolutely necessary and with your explicit consent.

How we use your data

Green New Deal UK uses our supporters’ personal data in a variety of ways which include the following:

  • Providing you with information or products that you have requested from us.
  • Providing you with information that is relevant to your interests.
  • Processing donations and joining fees received from you.
  • Making enquiries or informing you about your interactions with us (e.g. resolving issues with Direct Debits, or informing you of changes to events).
  • Responding to any complaints from you.
  • Offering you ways to fund our work.
  • Inviting you to campaign with us.
  • Keeping you updated on our campaigning work.
  • Informing you of volunteering opportunities.
  • Inviting you to participate in surveys or research.
  • Reviewing records such as for financial audits.
  • Analysing and refining our advertising, campaigning and other operations to increase our effectiveness.
  • Monitoring your information to prevent fraud.
  • Working with authorities in cases of fraud or criminal investigations.

Personalised Communication and Profiling

In order to ensure our communication with you is relevant, timely and will ultimately provide a better experience for you, we may build up a profile of you based on the interactions you have had with Green New Deal UK.

This profiling may include details of your past engagement with Green New Deal UK together with information gathered from sources detailed elsewhere in this Privacy Policy and may be carried out either by Green New Deal UK or by a trusted partner. For example, in deciding who to email about writing to certain MPs, we might look at which supporters have written to their MPs in the past and which supporters live in selected MP’s constituencies. This enables Green New Deal UK to most effectively target relevant information and appropriate requests for support. This does not affect any of your rights or limit you in how you can get involved with us and our campaigns. You may opt out of profiling at any time by contacting us using the details at the bottom of this policy.

1.2 Volunteer Community

Once you sign up to volunteer with us we rely on legitimate interests to process your information – this enables us to send you information about volunteering opportunities we think will be of interest to you, and to use your information to investigate complaints or serious incidents, for example. We also need to process your information to run an efficient volunteer scheme and to evaluate your progress.

For some volunteering opportunities, it might be necessary for us to collect sensitive personal data. For example, if you volunteer with us at one of our events we might ask you about your accessibility needs, health or dietary requirements in order to make any reasonable adjustments you might need, or if the volunteering takes place around vulnerable adults or children, we may require a DBS check. When collecting sensitive data we will always ask for your explicit consent.

Sensitive data is only shared with staff who need it to carry out their duties; for example, a member of staff responsible for health and safety at an event might need to know if you have any medical conditions. We have measures in place to ensure the confidentiality of your sensitive data.

1.3 Job Applicants

If you apply for a job with us, your personal data will be collected and processed by Green New Deal UK.

We will collect a range of information about you, including:

  • Your name, address and contact details, including email address and telephone number.Details of your qualifications, skills, experience and employment history.
  • Whether or not you have a disability for which we need to make reasonable adjustments during the recruitment process.
  • Information about your entitlement to work in the UK.
  • Equal opportunities monitoring information, including information about your ethnicity, sexual orientation, health, and religion or belief. We will only collect this sensitive information with your explicit consent, which can be withdrawn at any time. We keep this information separate from your application.

We initially rely on your consent to process your information as a job candidate. We are legally obliged to process information about your right to work in the UK and we will take a copy of your passport as evidence of your right to work if we interview you. We are legally obliged to make reasonable adjustments for you if you have a disability.

Your information will not be used for any purpose other than processing and managing your job application, and for internal reporting on our recruitment processes. Only people involved in the recruitment process for the role you apply for will have access to your personal data.

Personal information about unsuccessful candidates will be held for one year after the recruitment exercise has been completed and will then be destroyed. We retain de-personalised statistical information about applicants to help inform our recruitment activities, but no individuals are identifiable from that data.

If you are successful in your application, our use of your data will be set out in our policies for Green New Deal UK Staff.

1.4 Visitors to our website and digital platforms

Cookies

Cookies are small files that are downloaded onto your computer or mobile device from websites that you visit. Cookies contain information that allows websites to recognise that you have used the site before.

How we use cookies on our website

Green New Deal UK uses cookies to ensure your privacy and security when you visit secure areas of our website, such as donation pages and registration forms.

Green New Deal UK will also collect information such as your Internet Protocol (IP) address for monitoring and improving the effectiveness of our website services as well its security.

Third party cookies on our website

Green New Deal UK uses Google Analytics to compile statistics on how our website is being used, which can help us to improve our website and online services.

Our website also uses Google Analytics advertising features to enable us to better understand the interests of our audience and to tailor our communications to be more relevant to you.

If you do not wish to see these adverts, you can:

Controlling your cookie preferences

All Internet browsers allow you to control which cookies you accept and which you delete. For more information about cookies, please see www.allaboutcookies.org.

Third party cookies and our social media and web advertising

You may also see our advertising online and on some social media sites if you have supported us before, or if your use of these channels suggests that you would find our campaigns relevant.

We use cookies to ensure that any investments we make in online advertising are as cost-effective as possible, by tracking how well individual adverts perform. These cookies are issued by third party service providers that we have assessed as secure.

If you do not wish to see these adverts, you can do so by managing the privacy settings on your social media accounts including Facebook, Instagram and Twitter

Depending on your settings or the privacy policies for social media and messaging services, you may have given these services permission to share your details with us. For example, if choosing to register for an activity using a ‘Sign up with Facebook’ link, Facebook may share information such as your name and email address with us.

Our Social Media Pages such as Facebook, Instagram and Twitter may also use ‘live chat’ services to allow Green New Deal UK representatives to offer you assistance or the opportunity to engage with Green New Deal UK in a manner relevant to you.

These services may involve the use of cookies and the transfer of information about your site navigation, such as your IP address, to secure networks for the purposes of storage and analysis. This information will only be used for the purposes of administering these live chats.

2. How your data is kept secure

2.1 What Green New Deal UK does to keep your data secure

Green New Deal UK uses industry-standard tools to safeguard the confidentiality of your personally identifiable information. We make every effort to protect against the loss, misuse and alteration of the information under our control.

We always use a secure connection when collecting personal financial information from you and conform to PCI standards. All forms which request credit card or bank details use Secure Sockets Layers (a security protocol that provides communications privacy over the Internet in a way that is designed to prevent eavesdropping, tampering, or message forgery) for encryption. Most web browsers support Secure Socket Layers.

The link between your web browser and the server is secure if your web browser displays a small padlock or key symbol somewhere in the frame, or the address bar shows a web address beginning https:// (rather than http://)

We endeavour to keep all supporter data inside the European Economic Area (EEA), and ensure that any time data is transferred outside the EEA appropriate safeguards on data security and processing are applied and that any services used operate within the Privacy Shield Framework.

2.2 Who has access to your data

Within Green New Deal UK

Within Green New Deal UK, only those authorised to process your data can access your data. We work hard to ensure our staff and volunteers can only see the data they need to perform their tasks. All our staff are trained to understand data protection and what they need to do to keep your data secure. We review our data awareness training regularly to ensure it is up to date. We ensure volunteers are given appropriate data awareness and protection training where they are responsible for handling data, for example, if they are collecting petition signatures at an event.

Working with Third Parties

We will never sell or swap your details with other organisations

We do use trusted companies like fundraising agencies, fulfilment houses and software platform providers to administer some activities, in which case they will use your details only for that purpose – for example, applying your name and address to a mailing.

2.3 Data Retention

Data collected by Green New Deal UK will be retained only for an appropriate length of time. In some cases, the retention periods are governed by law, while in others we are guided by best practice and our operational needs.

When we no longer need to retain your personal information we will ensure it is securely disposed of.

You have the right to ask us to delete personal information we hold about you in some circumstances, for example, if we are processing the data on the basis of consent and you wish to withdraw that consent.

3. How Green New Deal UK will communicate with you

For any marketing communications about our campaigning, fundraising or volunteering we will only contact you via email and SMS if we have your consent to do so.

We may send you marketing materials by mail or via phone if we have your consent or we believe you would be interested in our campaign unless you have expressed a preference not to receive such content.

To respond to your queries we will contact you either via the medium you used to contact us or by a medium you have indicated you would like us to respond with. If we need to contact you for any administrative purposes then we will usually email you or call you depending on what contact details we have available for you.

4. How you can affect the way Green New Deal UK communicates with you

The first time you sign up to one of our campaigns or make a donation you will choose how you would prefer to be contacted. We will respect your choices and not make any changes to your preferences unless you change them yourself, or contact us to change them on your behalf.

You can change your mind on how you would like us to contact you or tell us that you would no longer like to hear from us by emailing us via the contact form.

If we are processing your data on the basis of consent and we don’t hear from you for five years we will stop contacting you. If this happens and you want to start hearing from us again you can tell us using the methods mentioned above.

5. Your Data Protection Rights

Under data protection legislation you also have a number of additional rights which are outlined below:

· You have the right to be informed about how Green New Deal UK uses your data.

· Where we are processing data based on your consent, you have the right to withdraw this at any time.

· You have the right to change your personal information if it is incomplete or inaccurate.

· You have the right to request the deletion or removal of your personal information in certain circumstances, including where it is no longer necessary for us to hold it for the purposes for which we are processing it.

· You have the right to restrict our processing of your data if there is disagreement about its accuracy or legitimate usage.

Subject Access Requests

You have a right to ask for a copy of the information we hold about you, which Green New Deal UK will supply to you within one month. Green New Deal UK will ask for proof of identity and may charge a fee should any request be unusually complex or time-consuming. If you would like to request a copy of the personal information Green New Deal UK UK holds on you, please contact our supporter services team.

6. How Green New Deal UK protects children’s privacy

The safety of children is very important to us. If you are aged under 16 and would like to support or get involved with Green New Deal UK, please make sure you have your parent/guardian’s permission before sharing any personal information with us.

All applicable laws are followed with respect to data collection from children. Where we have date of birth information, we will not share data collected from children with any third parties at any time under any circumstances.

7. How to find out more or make a complaint

Green New Deal UK operates in accordance with all relevant UK data protection laws. If you would like to find out more about these laws and how you could be affected beyond what is mentioned in this privacy policy, please visit the Information Commissioner’s Office.

If you have any specific questions about how Green New Deal UK processes your data which are not answered here or you would like to make a complaint about how we have managed your data then please either write, or email us via the details below.

Co-ordinators

Green New Deal UK

Oxford House

Derbyshire Street

Bethnal Green

E26HG

or contact us through this website.

If you are not satisfied with our response to your enquiry then you can contact the Information Commissioner’s Office directly via the details on their website.

8. Changes to this policy

Our Privacy Policy may change from time to time. The amended version will be published on our website and any significant changes will be communicated to supporters either on the website or directly.

This will replace any previous privacy policy wording and all conditions and terms of use will be in force from the date of publication.

Last updated: 08/05/2020

Facebook Messenger Bot

1. Name and contact details of the data controller and of the company data protection officer

This privacy policy applies to data processing by the following controller:

Name: Green New Deal UK

Address: c/o NEON, Oxford House

Derbyshire Street

Bethnal Green

E26HG

Email: info@greennewdealuk.org

Phone: +44-7801212958

Data protection officer: Hannah Martin

2. Contact via Facebook Messenger Bot

We offer the possibility to contact us via Facebook Messenger Bot (“Facebook Chatbot“). The Facebook Chatbot is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). Information about Facebook Messenger Chatbot and the GDPR regulations of Facebook can be found here: https://developers.facebook.com/docs/messenger-platform and https://www.facebook.com/about/privacy/.

2.1 Personal data collected via Facebook Chatbot

Contacting us via Facebook Chatbot requires a valid Facebook account so that we know who the source of the inquiry is and that we can respond to it. Facebook provides us – in case you give consent in contacting us via Facebook Chatbot – with your Facebook Page Scoped User ID and your Facebook account name (first name, last name). Further information/data such as email address, telephone number or text input can be provided voluntarily as a result of double opt-in. Facebook also provides us your page interaction’s data on the Facebook page connected to the system and administered by the Data Controller, and also, we record every interaction happening during a chat with you by our Messenger channel.

2.2 We use this information/data in order to:

  • respond to your questions,
  • encourage you to subscribe our newsletter
  • and regularly send you news updates
  • inform the opted-in subscribers about the campaign based on their documented preferences.

2.3 The data processing for the purpose of contacting us takes place under Art. 6 (1), sentence 1, point (a) of the GDPR on the basis of your voluntarily given consent.

You have the right to withdraw your consent at any time pursuant to Art. 7 (3) of the GDPR. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. This means that from that time on we are no longer allowed to continue the data processing based on that consent.

Your right to withdraw may be exercised at any time using the button “Unsubscribe” at the bottom of the Facebook Chatbot window or by sending an email to info@greennewdealuk.org  

Once you have withdrawn your consent, we will no longer collect personal data by use of the Facebook Chatbot, unless you have expressly consented to another use of your data or we have reserved the right to use such data in a different way that is permitted by law and about which we have informed you in this policy. Please note, that the withdrawal of consent will not affect the lawfulness of processing based on your consent before its withdrawal.

2.4 The personal data processed by us with respect to the Facebook Chatbot will be deleted in accordance with the legal requirements.

3. Newsletter

If you have expressly consented under Art. 6 (1), sentence 1, point (a) of the GDPR we use your email address to regularly send you updates our campaigns and/or our services by email.

We use the so-called double opt-in method for sending the newsletter. This means that we send you an email newsletter only after you have expressly confirmed to us that you consent to the sending of newsletters. We then send you a confirmation email asking you to confirm, by clicking a provided link that you wish to receive newsletters in the future.

By activating the confirmation link, you grant us your consent to the use of your personal data pursuant to Art. 6 (1), sentence 1, point (a) of the GDPR. When you register for the newsletter, we retain your IP address as recorded by your Internet service provider (ISP) as well as the date and time of registration in order to allow us to track a possible misuse of your email address at a later time. The data collected by us when you register for the newsletter are used exclusively for promotional purposes by way of the newsletter.

You can unsubscribe the newsletter at any time using the link provided in the newsletter. Alternatively, you are also free at any time to email your unsubscribe request to info@greennewdealuk.org . Once you have unsubscribed, your email address is immediately deleted from our newsletter distribution list, unless you have expressly consented to another use of your data or we have reserved the right to use data in a different way that is permitted by law and about which we have informed you in this policy.

4. Disclosure of data

Your personal data are not transmitted to third parties for any purposes other than those specified in the following.

We disclose your personal data to third parties only if:

  • you have granted your express consent to that under Art. 6 (1), sentence 1, point (a) of the GDPR,
  • the disclosure is necessary under Art. 6 (1), sentence 1, point (f) of the GDPR for the establishment, exercise or defence of legal claims and there is no reason to consider that you have an overriding legitimate interest in the nondisclosure of your data,
  • there is a legal obligation to disclose under Art. 6 (1), sentence 1, point (c) of the GDPR, and
  • disclosure is permitted by law and necessary for the execution of contractual relations with you under Art. 6 (1), sentence 1, point (b) of the GDPR.

5. Rights of data subjects

You have the right:

  • to obtain, pursuant to Art. 15 of the GDPR, information about your personal data that are being processed by us. In particular, you can request information about the purposes of the processing, the category of the personal data, the categories of recipients to which your data have been or will be disclosed, the envisaged storage time, the existence of the right to rectification, erasure, restriction of processing or objection, the existence of the right to lodge a complaint, the source of their data in the case of data not collected by us, and the existence of automated decision-making, including profiling, and where applicable meaningful information about the particulars thereof;
  • to obtain, pursuant to Art. 16 of the GDPR, without undue delay the rectification of inaccurate personal data stored by us or to have incomplete personal data completed;
  • to obtain, pursuant to Art. 17 of the GDPR, the erasure of your personal data stored by us, if the processing is no longer necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, on the grounds of public interest or for the establishment, exercise or defence of legal claims;
  • to obtain, pursuant to Art. 18 of the GDPR, the restriction of processing of your personal data, if the accuracy of the data is contested by you, the processing is unlawful but you oppose their erasure and we no longer need the data but they are required by you for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21 of the GDPR;
  • to receive, pursuant to Art. 20 of the GDPR, your personal data that you have provided to us in a structured, commonly used and machine-readable format or to obtain transmission to another controller;
  • to lodge a complaint with a supervisory authority pursuant to Art. 77 of the GDPR. As a rule, you can do so with the supervisory authority in your habitual residence or place of work or where our firm has its registered office.

6. Data processor and sub-processors

We use Datadat OÜ (Pärnu mnt 158/2-88, 11317, Tallinn, Estonia; registry number 14680412; VAT number EE102152445), url: winwith.me) as the data processor that operates the Messenger Bot-building software and the database connected to that. Datadat OÜ has a Facebook App (WinWith.Me) for the communication of the bot with Facebook as a platform, and this app had been approved by Facebook.

Datadat OÜ uses the Hetzner Cloud service to store and access personal data provided by data processor/subprocessor Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The privacy policy of the firm is availible at: https://www.hetzner.com/rechtliches/datenschutz/

Datadat OÜ uses the Cloud Functions for Firebase, the Firebase Realtime Database, the Cloud Storage for Firebase services to store and access personal data provided by data processor/subprocessor Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google usually operates these services from a Google server in the USA and stores the data there. Google is certified under the Privacy Shield agreement and thus provides a safeguard in adherence to European data privacy laws: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=ActiveData

7. Security

We apply appropriate technical and organisational measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised third-party access. Our safety measures are continually improved in keeping with technological advances.

8. Status of and changes in this privacy policy

This privacy policy is up to date as of May 2020. Changes in statutory or regulatory requirements can make it necessary to amend this privacy policy.