Our Data Privacy Notice

GDPR: DATA PRIVACY NOTICE

Statement

The ASSC respect and wish to protect the privacy of those who visit our site and use our services. The information below explains how we use the information that we collect.

The ASSC is the data controller. This means we decide how your personal data is processed and for what purposes.

Any personal data provided by you to us will be held and processed in accordance with the data protection principles and adhering to the rights of the individual.

The purpose(s) of securely processing your personal data

We use your personal data for the following purposes:

To fulfil your request for information about our services
To communicate with you generally
To provide Members with advice
To provide you with up-to-date and relevant industry news
To communicate with you about your ASSC membership
To provide a marketing service for our EmbraceScotland Members
To provide information regarding self-catering holidays in Scotland
To contact you about our events and services
To inform you about offers and promotions from ASSC Partners for Business.
Data collection through research methods: data may be collected through research questionnaires where personal data may only be given voluntarily. Other data collected through research methods will be anonymous. The ASSC currently uses Survey Monkey to collect research data – please see their Privacy Policy here. Personal Data may only be given voluntarily.

You may give us information about yourself by filling in forms on our sites and/or, by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register to use our site, subscribe to our service, participate in social media functions on our site, and when you report a problem with our site.

We will contact you in the following ways

Email
Phone
Post

If you would like to change your contact preferences, please email us administrator@assc.co.uk

What justification is there for holding this information?

We hold this information under the lawful basis for processing of:

Legitimate interests: processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
Consent: where you give ASSC specific consent for a particular product or service.

Providing us with your personal data

We require your personal data as it is a requirement of Membership, event attendance or subscription.

How is data stored?

ASSC data is stored by a third-party company MailChimp. By ‘opting in’ to receive information from the ASSC, your data will automatically be added to the MailChimp database for processing in accordance with their Privacy Policy and Terms.

You may withdraw your consent at any time by contacting ASSC communications@assc.co.uk or you can withdraw at any time through MailChimp.

Events

Data for ASSC events is stored by a third-party company Eventbrite. If you register for an event, your data will be automatically added to the Eventbrite database for processing in accordance with their Privacy Policy and Terms of service.
You may withdraw your consent at any time by contacting ASSC: communications@assc.co.uk or you can withdraw through Eventbrite.

The categories of personal data concerned

We process the following categories of your data:

Ordinary personal data – may include personal identification details such as name and address, date of birth, email address & contact phone number(s), and details of your self-catering business.

Do we share your information?

The ASSC will only pass your information on to a third party where they are subcontracted to us to deliver part of a service. These subcontractors do not store your information and only use it for the purposes of fulfilling the service.

How long do we keep your personal data?

We keep your personal data for no longer than reasonably necessary. We only retain your data for the following purposes and use the following criteria to determine how long to retain your personal data: Term of Membership, Term of Subscription.

Your rights around the information we hold

The UK GDPR provides the following 8 rights for individuals:

The right to be informed

The right of access

The right to rectification

The right to erasure

The right to restrict processing

The right to data portability

The right to object

Rights in relation to automated decision making and profiling.

Please visit https://ico.org.uk/ for further information on this, alternatively contact communications@assc.co.uk

If you think your data has been misused or that we have not kept it secure, please contact communications@assc.co.uk. If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioners Office on 0303 123 1113, https://ico.org.uk/make-a-complaint/data-protection-complaints/data-protection-complaints/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England.

Changes to our privacy policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

This policy was last updated on 2nd September 2024