The Northern Heartlands project is one of 16 Great Place Schemes operating throughout England. Funded by the Heritage Lottery Fund, Arts Council England and Historic England, the Great Place Scheme is designed to pilot new approaches that enable cultural and community groups to work more closely together, to place culture and heritage at the heart of communities and use cultural engagement to influence decision-making.
Northern Heartlands’ accountable body is Visit County Durham. The nominated Data Protection Officer is:
Michelle Gorman
Visit County Durham
1stFloor
3-4 Millennium Place
Durham
DH1 1WA
Tel: 03000 261 221
Email: michelle.gorman@visitcountydurham.org.uk
Under the provisions of the Data Protection Act 1998, we adhere to the following principles:
- Personal data shall be processed fairly and lawfully
Personal data shall be obtained only for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or those purposes. - Personal data shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed.
- Personal data shall be accurate and, where necessary, kept up to date.
- Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
- Personal data shall be processed in accordance with the rights of data subjects under this Act.
- Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.
- Personal data shall not be transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.
How we collect your data
We collect your data on the basis that your consent is:
- Freely given
- Specific to the purpose
- Informed
- Unambiguous indication of your wishes
We collect data
- By your completion of online contact form on our website
- By you contacting us via email or telephone or mobile phone
- By you completing a paper form requesting personal information
- By you completing digital surveys and forms requesting personal information
Why we collect your data
- To ensure we have your consent for participating in Northern Heartlands projects and events
- To contact you about other Northern Heartlands projects or events that may be of interest you
- To arrange a meeting or contact via telephone or email
- To collect statistical information for research and evaluation purposes
- For reporting purposes to funders
What data we will collect
- Name
- Address
- Age range
- Male/female
- Contact information: telephone, mobile, email
- Comments
- Images
- Audio and video recordings
Transparency
Information we provide and communication with you about your personal data will be:
- Concise, transparent, intelligible and easily accessible
- In clear and plain language
- in writing or by other means, e.g., electronic
- If requested, we will provide information orally
- Information will be provided free of charge
How we protect your data – storage, security, deletion, risk assessment
We recognise that you retain rights in the personal information we hold about you. We will keep that information secure and use it only for specific legitimate purposes.
We take sensible and reasonable precautions to ensure data security and safe storage:
- Risk assessments on type of data we hold
- Deploy industry standard security software to prevent security breaches, e.g., firewall, anti-virus, anti-malware
- Utilise extensive access control
- Deploy regular software updates
- Ensure physical security of premises and all mobile devices, e.g., laptops and mobile phones
- Staff training on security procedures
- Staff training on data protection
With whom we share your data
We will not share your data with any other organisation or individual without your consent.Information is anonymised for the purposes of statistical reporting.
Your rights under data protection legislation
- Right to be informed – the date we provide will be:
- concise, transparent, intelligible and easily accessible;
- written in clear and plain language, particularly if addressed to a child; and
- free of charge.
- Right of access
- you have the right to access your personal data and supplementary information.
- The right of access allows you to be aware of and verify the lawfulness of the processing.
- Right to rectification
- You have the right to have personal data rectified.
- Your personal data can be rectified if it is inaccurate or incomplete.
- Right to erasure
- You have the right to be forgotten, that is you can request the deletion or removal of personal data where there is no compelling reason for its continued processing.
- Right to restrict processing
- You have the right to ‘block’ or suppress processing of personal data.
- When you restrict processing of your data, we will store the personal data, but not further process it.
- We will retain enough information about you to ensure that the restriction is respected in future.
- Right to data portability
- You can obtain and reuse your personal data for your own purposes across different services, e.g., other applications to help you find a better deal or understand your spending habits
- You can move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.
- Right to object to your data being processed based on grounds relating to your situation
- You have the right to object to any processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
- You have the right to object to direct marketing (including profiling); and
- You have the right to object to any processing for purposes of scientific/historical research and statistics.
- Rights related to automated decision making including profiling
- We will carry out automated decision making and profiling only if necessary to our activities and we have your consent to do this
- We will provide you with information about any automated information processing
- Enable you to access this data
How to make a request or a complaint
Contact Michelle Gorman, Managing Director, Visit County Durham or Jill Cole, Director, Northern Heartlands
Michelle Gorman
Visit County Durham
1stFloor
3-4 Millennium Place
Durham
DH1 1WA
Tel: 03000 261 221
Email: michelle.gorman@visitcountydurham.org.uk
Jill Cole
Northern Heartlands
3 Witham Studios
Hall Street
Barnard Castle
County Durham
DL12 8JB
