Dorset Fungus Group Data Privacy Notice
Dorset Fungus Group complies with its obligations under the General Data Protection
Regulation (GDPR) by ensuring personal data is processed lawfully and in a transparent
manner; and that it is relevant and limited to what is necessary. We protect personal data
from loss, misuse, unauthorised access and disclosure.
The Dorset Fungus Group’s management committee is the data controller and is responsible
for your personal data and decides how your personal data is processed and for what
purposes.
1. Your personal data – what is it?
Personal data is anything that could allow a living person to be identified.
2. Where does this data come from?
Personal data comes from the members themselves when they join from the 1st April each
year and annually thereafter if they renew their membership.
3. What personal data is collected from you and why?
The Membership Secretary collects personal data in the form of name, address, email
address and telephone number, from the information supplied by each member on the
membership form. This information will be used for the following:
– to administer membership records;
– to record subscriptions paid by members;
– to record our income and expenditure to ensure financial transparency;
– insurance purposes;
– to inform you of forays, news, and events
4. Does the Dorset Fungus Group collect any “Special Category Data”?
GDPR refers to sensitive personal data as “Special categories of personal data”. Dorset
Fungus Group does not record sensitive personal data such as date of birth, age, race,
colour or creed, credit card or any other similar personal financial information.
5. On what lawful basis is your personal data collected and processed?
Explicit consent: the individual has given clear consent for you to process their
personal data for a specific purpose. Dorset Fungus Group achieves this by asking
individuals to positively ‘opt in’ to gain consent:
– to process personal information
– to contact you with information regarding forays, social events, Annual General Meetings;
and any last-minute changes in the programme.
Legitimate Interests: the processing is necessary for your legitimate interests or the
legitimate interests of a third party unless there is good reason to protects the
individual’s personal data which overrides these legitimate interests. In the case of the
Dorset Fungus Group which is a social organisation, the legal basis for holding and using the
data is that of legitimate interests. We maintain the name, address, email and telephone
numbers for insurance purposes, and subscriptions paid by individuals for financial
transparency and accounting records.
6. Sharing your personal data
The Management Committee will treat all personal data as strictly confidential. The