Tenovus Scotland (TS) is an independent charity funding general medical research. TS is fully committed to protecting personal information and to the principles of data protection as set out in the General Data Protection Regulation 2018.
This privacy statement explains how we collect and use personal information about you.
What categories of data we collect from the individual
- We collect information such as your name, address (postal, email and ip) and phone number
Where we collect personal information from
- We collect information you provide when a) you attend our events or express an interest in TS b) you make donations c) you volunteer for TS and d) you submit grant applications, reports and surveys. We also receive information about you from third parties which you have used to donate to us.
How we use data we collect
- We use your contact information to send you our latest news and ways you can support our work. We use your details to process donations you have made to us, to send you a receipt for such donations (annually for monthly or quarterly donations) and we also use your personal data to claim Gift Aid, if applicable. If you have submitted a grant application, we use your contact information as stated in the Grant Application form.
Legal bases under GDPR to justify our processing
- We will process your personal data to send you by post our latest news and ways you can support our work as it is in our legitimate interests. It is also necessary to process your personal data for a) compliance with our legal obligations eg when we receive donations or send Gift Aid information to HMRC or b) performance of a contract or to take steps to enter into a contract when you have submitted a grant application.
- We will also process your personal data in connection with internal reporting and analysis because we believe it is necessary for our legitimate organisational interests in creating better fundraising events, better communications, and a better website. We have conducted a legitimate interest assessment to ensure that this processing is not overridden by your rights or interests. We employ safeguards, such as a formal data governance programme, to protect your privacy. To opt out of this processing, please see our section on Data Subject rights.
- We do NOT engage third parties to provide us with information about you except for Just Giving and Eventbrite.
Data subject rights
You have the following rights which you can request at any time.
- Right of Access: we must inform you if we have your data and give you a copy of your data.
- Right to Rectify: we must correct your data.
- Right of Erasure: we must delete your data.
- Right to Restrict Processing: we must stop processing but not delete
- Right of Portability: we must give you your data in a common, machine readable format
- Right to Object: you can object to direct marketing, to processing for scientific./historical research or statistics, to processing based on legitimate interests or public interest
- Right not to be profiled: we do not profile
- Right to complain to the Information Commissioner’s Office
Sharing and transfers
- We will NEVER knowingly sell, rent, or trade your personal data.
- We may disclose your data to a) donors if required to enable the consideration of funding applications made to Tenovus Scotland and b) to service providers who render services to us (all of which are contractually obliged to act only on our instructions and in accordance with applicable laws, including GDPR).
- We may also disclose your information if required by law or to enforce our legal rights.
- Some of our service providers are based outside the EEA. Therefore, sometimes we transfer your data outside the EEA. If we do, we ensure your data is processed only in countries that provide an adequate level of protection for your data or where the recipient provides appropriate safeguards, such as model contract clauses, binding corporate rules, or mechanisms like the EU-U.S. Privacy Shield framework. For a copy of such safeguards, please contact us.
Retention and Protection
- We hold and retain personal information only for as long as is necessary for the fulfilment of the above purposes and in accordance with our Retention Policy. For a copy of such Retention Policy, please contact us.
- We use appropriate organisational and technical measures to ensure your data is secure and protected from loss, misuse and unauthorised access or alteration.
- When someone visits our website, we do not share information about their use of our site with social media, advertising and analytics companies. Information collected via our enquiry forms will only be used for the purpose of contacting you to answer your enquiry.
- For information on cookies, please refer to the section at the end of this policy.
- We reserve the right to make changes to this statement and it is your responsibility to ensure you read and understand it and check it periodically on our website for any changes.
Mr Iain McFadzean
at Royal College of Physicians and Surgeons of Glasgow
232-242 St Vincent Street
Glasgow G2 5RJ
Telephone: 0141 221 6268 or 07544 556 487
We seek to resolve directly all complaints about how we handle personal information but you also have the right to lodge a complaint with the Information Commissioner's Office, whose contact details are as follows:
Information Commissioner's Office
Telephone - 0303 123 1113 (local rate) or 01625 545 745
Website - https://ico.org.uk/concerns