Introduction
At JRS Knowhow, it is important to us that you understand why and how we collect and use your personal information, if we work with you. This privacy policy sets out our policies on the collection and use of your data, and your rights under data protection legislation in the United Kingdom.
About JRS Knowhow
JRS Knowhow Ltd (SC689503) is a social enterprise and subsidiary of JustRight Scotland. JustRight Scotland is a Scottish Charitable Incorporated Organisation (SC047818) which also provides legal services through its limited liability partnership, JustRight Scotland LLP which trades as JustRight Scotland (SO305962). Our Registered Office is: Room 1, 1stFloor, 39 St Vincent Place, Glasgow, G1 2ER.
Data Controller and the Data Protection Officer
Both JustRight Scotland (SCIO) and JRS Knowhow Ltd are registered with the Information Commissioner’s Office (ICO) as data controllers. Our Data Protection Officer for JRS Knowhow Ltd is Ricarda Fillhardt, who you can contact at ricarda@jrsknowhow.org
Why do we collect personal information?
JustRight Scotland uses the law to defend and extend people’s rights. JRS Knowhow Ltd is our social enterprise to make human rights information accessible online in a fun inclusive manner. We contribute our expertise through:
- We bring expert online learning skills and we work with collaborators and legal partners who draw on direct experience of issues and subjects.
- We are inclusive, and the way we communicate and deliver our services is tailored for our clients.
- We are strategic and find new ways to innovate to increase social justice.
- We build relationships of trust with our clients and partners*, and make principled decisions about what we do, and how we do it.
In order to fulfil our aims, and support our projects, we may need to collect personal information from individuals participating in our training and outreach events.
What might we request?
We collect data you give to us. For example:
- Personal details (name, date of birth, email, address, telephone, education details etc.) when you sign up to an event with JRS Knowhow Ltd.
- Data known as sensitive personal data (ethnicity, reasonable adjustment requests)
- Financial information (payment information such as credit/debit card or direct debit details)
- During virtual meetings and training sessions there might recordings made for attendees to watch back, or photographs of events taken. This might include audio or video recordings with transcripts made available.
- When someone visits jrsknowhow.org we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
If you wish to not be included in this we would ask you to notify us on registration so we can take practical steps to meet your request.
How will we request this information?
We will always seek your active consent (specific permission) in order to provide this information (either in writing or orally). You have the right to withhold certain information, if you wish. We may still be able to provide you with a service, even if you choose to withhold information, but this will depend on the service you are accessing at the time.
If you wish to withhold information, please tell us as soon as possible, and we will explain what this means in terms of whether we can continue to work with you.
What will we do with this information, and who will we share it with?
We will use the personal information you have given us to provide you with the service we have offered to you. We will explain to you specifically what purposes we will use your information for, and who it will be shared with, at the time we take your consent. These specific terms will apply in place of any, more general, terms contained in this privacy policy.
We may also use some of this information for research or to write reports, but would only do so anonymously, so that you cannot be identified. If we are working in collaboration with another partner organisation or service provider, for example, an Interpreter or sign language provider, we may share some of this information, as needed, in order to support the collaboration.
We will not use your personal information for any purpose other than the purposes we told you about at the time you agreed to share it with us, unless we are required to do so by law. If we wish to use your personal information for any other purpose, we will contact you to explain this purpose, and ask for your explicit permission.
How will we store this information?
We use secure online cloud-based servers, and this is where we store all information relating to email communications, as well as our other training, research and policy work. The data is securely stored, and access is restricted to only members of our staff and our IT services providers who require this information to do our work.
We have an Information Governance and Data Protection Policy to ensure that our staff are aware of their obligation to handle data securely, including if they require to work remotely, and setting out our procedures in the event there is a data breach. We use a range of online and communication tools in order to offer remote services, training and legal education, as well as to accept payments and donations. These include (but are not limited to) Microsoft 365, Moodle, Zoom, Eventbrite, Paypal, JustGiving and MailChimp. The data you provide through those tools are securely stored there, and access is restricted to only members of our staff and those service providers who require this information to do our work.
How long will we store this information?
We will only store your information as long as necessary, as required by our contractual relationship with clients, as required by law, and otherwise for a reasonable period. This will usually be set out in the specific information we give you when we take your consent. You have the right to withdraw your consent and ask us to delete all information we hold about you, at any time, as explained further below.
Your Rights in Relation to Your Personal Data
You have a number of important rights in relation to the data we hold about you, which you can exercise at any time:
- To ask to see a record of all the personal information we hold.
- To ask that we amend any incorrect or incomplete data that we hold.
- To withdraw consent and request that we permanently delete any data we hold.
- To complain about how we have taken or processed your data.
For more information or to exercise any of these rights, please contact our Data Protection Officer, Ricarda Fillhardt, at ricarda@jrsknowhow.org.
If you are not happy with how JRS Knowhow have taken or processed your data, you also have the right to lodge a complaint with the Information Commissioner’s Office on 0303 123 1113 or at www.ico.org.uk/concerns.
Thank you for taking the time to read our privacy policy. We hope you have found it helpful, welcome any comments you may have and look forward to working with you