Registered Charity No. 1005334 Company No. 02634036

 
 

Privacy Policy

 

Privacy Statement for Abney Park Trust

Who are we?

Abney Park Trust is a small volunteer-run charity, working in partnership with Hackney Council.  Our purpose is to bring Abney Park to life so together we can benefit and learn from the park’s unique wildlife, biodiversity and rich cultural heritage.

Abney Park Trust is a charity, registered with the Charity Commission under charity number 1005334; and company limited by guarantee registered with Companies House under company number 02634036. 

Abney Park Trust’s office is at South Lodge, Abney Park Cemetery, Stoke Newington High Street

London N16 0LH  and it can be contacted on info@abneypark.org


Purpose of this Statement 

Abney Park Trust knows that privacy is important and cares about how it uses personal data. Abney Park Trust respects and values the privacy of those with whom the charity comes into contact, and will collect and use personal data in ways that are described here, and in ways that are consistent with our obligations and your rights. 

This statement is about the personal data we collect and use, for what purpose  and your rights in relation to that data. Not all data is personal data. For example data about companies or businesses may not be personal data. Personal data is defined by the General Data Protection Regulations (GDPR) as “any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier”. In plainer language, personal data is information about you that enables you to be identified. It covers obvious things like your name and contact details; but it also covers less obvious things like identification numbers, electronic location data and other on-line identifiers.

From time to time we may need to change this privacy statement. The most recent version of this statement is available on our website.

Who do we process personal data from?

We may process personal data from

  • Volunteers and people who are interested in a voluntary role;

  • Trustees and people who are interested in a  trustee role;

  • People who use our services (eg grave search services);

  • Partners and other voluntary organisations;

  • Traders and businesses;

  • Employees and contractors;

  • Applicants for roles (paid and voluntary);

  • Members of the company and members of any “Friends of “ or similar scheme;and

  • Members of the public who are interested in our work/events/activities or attend these and members of the public  who raise questions/queries or want to know more about the Trust or the park.




Why do we collect and process personal data?


We collect and process personal data so we can be sure that Abney Park Trust can:


  • Communicate with you about our activities, events, how we carry out our charitable purposes, how you can get involved and how you can support Abney Park Trust;

  • Carry out the Trust’s charitable purposes and keep appropriate records;

  • Manage any contractual or other legal or formal relationships with you (for example as employee or volunteer);

  • Manage any supporter/membership, “Friends of” or similar scheme;

  • Comply with its legal obligations under safeguarding, charity, employment and other relevant laws.


How do we process personal data from you?


We process personal data when you sign up to our Newsletter or another mailing list; when you register your interest in or attend an event we are organising (this may also include photography or other recordings of a live event, either in real life of for example on zoom or Teams); when you email us; when you make a donation (except when you chose to make a donation entirely anonymously);  when you contact us in relation to the services we offer (for example grave searches) or when you visit our website. We also collect data when you express an interest in or apply for a role (paid or unpaid) or to become a member of the company or any supporter/“Friends of” or similar scheme.


When you interact with us on social media platforms such as Facebook, Twitter or Instagram, we may obtain information about you (for example, when you publicly tag us). The information will depend on the privacy settings you have set  on those platforms.


What personal data might we process?


The personal data we process, depending on what information you provide,  may include the following:


  • Name

  • Image (in the case of photographs or other recording)

  • Information about your interests and preferences

  • Email  address

  • phone number

  • social media handle

  • organisation

  • job title

  • bank account details, if needed to process donations, subscriptions or other payments.


Generally speaking we do not process bank account details if you buy a ticket to attend one of our events or activities. In these circumstances, the bank account data is processed by a secure third party such as Ticket Tailor or EventBrite. Where the Trust is raising funds for a special appeal (such as, for example, an appeal to create or restore a specific monument) we would also usually use a third party to process these details (for example CAF) rather than processing these details ourselves.


We also collect the following information in connection with recruitment into paid and unpaid roles (including volunteers and other trustees) as relevant:


  • contact details

  • date of birth

  • National insurance number

  • Copies of id documentation necessary for right to work checks

  • CV details

  • Details for DBS checks

  • Bank account details necessary for payroll

  • Emergency contact details


Where you have approached Abney Park Trust in connection with our grave search service we will collect:

  • Contact details

  • Details of your relative or other person whose grave you wish to locate

  • Bank account details necessary for processing payments


Your personal data is kept either within a hosting platform, such as Intuit Mailchimp or within Abney Park Trusts IT system.  


With whom do we share your personal data?


We share your personal data with Intuit Mailchimp whose platform we use to send out mailings (and any other mailing facilitator which Abney Park Trust might use from time to time). Please also note that  Intuit Mailchimp’s offices and servers where your information is stored may be located  outside the UK, including in the United States, so your information may be transferred stored or processed outside the UK. Data protection, privacy and other laws of other countries  might not be as comprehensive as those in the UK,  however Intuit Mailchimp takes many steps to protect your privacy. Please see Mailchimp’s privacy policy for more information Mailchimp's Legal Policies | Mailchimp.


Abney Park Trust will share your data with third parties if it is under a legal obligation to do so (for example with HMRC for payroll tax purposes; with appropriate safeguarding authorities if there is a safeguarding concern), and with appropriate third parties who support the Trust in compliance with its obligations (for example a pay roll services provider or a DBS checking service).


Abney Park Trust will not sell or rent your information to any third party. Abney Park Trust does not share your data with third parties for marketing purposes.  However Abney Park Trust may share your personal data with third parties, such as those that help us organise or host our events.



The Abney Park Trust website may contain links to other websites run by other organisations. This statement only applies to Abney Park Trust, so we encourage you to read the privacy policies on other websites. Abney Park Trust is not responsible for the data protection or privacy policies, procedures or practices of other organisations, even if you access their websites from the Abney Park Trust. 


How is personal data used?


GDPR requires Abney Park Trust to have a lawful basis for using/processing personal data. Depending on the particular personal data and the context in which it is being used/processed, the following are the legal basis that we rely on:


  • Our legitimate interests: this is where we are processing personal data because it benefits you (for example you receive our newsletter, which you subscribed to), our organisation (for example we can tell you about the work we are doing or publicise the work we do) or someone else (for example we are telling you about events that someone else may be organising that are linked to Abney), without causing an undue risk of harm to anyone; all of the data protections described below apply, apart from the right to portability.

  • Compliance with legal requirements: this is where we have to process your data so we can comply with the law; for example if you are applying for a paid role  we have to process certain data to comply with our legal obligations to carry out “right to work” checks; all of the data protections described below apply, apart from the right to object; the right to erasure and the right to portability.

  • Consent: this is where we have your permission, after we gave you all the relevant information; for example, if you attend an event there may be a photographer present, or if you attend an on line event there may be a recording of that on-line event; all of the data protections described below apply apart from the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract: this is where we have to process personal data so we can enter into and carry out a contract with you;  for example if you are an employee we have to process personal data to perform elements of our contract of employment with you; all of the data protections described below apply apart from the right to object.


We may use/process personal data to


  • send you newsletters and information about activities and events;

  • send you information about how we carry out our charitable purposes, how you can get involved and how you can support Abney Park Trust;

  • so that we can understand who has attended events/activities and make formal minutes from charity meetings like board meetings and annual general meetings;

  • to publicise the work that we do and the events that we hold (for example by posting photos or recordings on social media);

  • manage any donations you make;

  • manage any contractual or other legal or formal relationships with you;

  • comply with its legal obligations under safeguarding, charity, employment and other relevant laws.


Abney Park will generally retain data for 7 years unless deletion is requested earlier by you. 


The exceptions to this are:

  • Where we have recorded a meeting, such as on line board meetings or an on line AGM to help us make formal minutes; the recording will be deleted once we have made the formal minutes;

  • In relation to unsuccessful applications for roles with Abney Park Trust, where we will delete the data after 6 months.


Abney Park Trust is legally required to hold some types of information to fulfil our legal obligations, for example if we are collecting Gift Aid. Abney Park Trust will hold personal data for as long as is necessary for the relevant activity or for as long as is set out in any contract we are party to.


Please note that you can unsubscribe from our mailings or change your preferences at any time by clicking the unsubscribe button.  



What are your rights in relation to personal data under GDRP and how can you exercise them?


The GDPR  provides you with data protection rights. Which lawful basis we rely on to process your data may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the Information Commissioners website. 


  • Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. 


  • Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. 


  • Your right to erasure - You have the right to ask us to delete your personal information. 

.

  • Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information.


  • Your right to object to processing - You have the right to object to the processing of your personal data. 


  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. 


  • Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. 


You can read more about your data protection rights at Your data protection rights | ICO


To make a data protection rights request, please contact us on info@abneypark.org . If you make a request, we must respond to you without undue delay and in any event within one month.


Complaints about the processing of personal data


If you have a complaint or concern about our use of your personal data, you can make a request to us by contacting the Trust at info@abneypark.org. 


If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the Information Commissioner Office (the ICO).


The ICO’s address is:

Information Commissioner Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AG.


Helpline number 0303 123 1113


Website https://www.ico.org.uk/make-a-complaint


Useful guidance about making complaints can be found at How to make a data protection complaint to an organisation | ICO


Cookies


Cookies are tiny software files that are stored when an individual visits a website. Cookies allow websites to recognise that a user has visited a site before. The cookies save some information about that user for when they access the site again.  Please see the separate policy on cookies on our website at Cookie policy — Abney Park.


January 2025