Privacy & Cookie Policy

Privacy Policy

Company Contact Details:

River Stewardship Company in association with CyanSec Ltd.

Unit 1 Newhall Road Industrial Estate

Sanderson St

Sheffield

S9 2TW

 

A copy of our complete GDPR Policy Set can be requested using the contact details above.

 

The Purposes of the Processing and Legal Basis:

River Stewardship Company is a social enterprise and company limited by guarantee, delivering commercial watercourse maintenance and community engagement. The River Stewardship Company employees paid staff on a variety of contracts (permanent, fixed-term and zero-hours), as well as working with volunteers.

The company holds the personal data of its paid and voluntary staff for payment processing and working patterns only. The only other contact by opt-in for newsletters is provided electronically.

 

Data Protection Objectives:

Necessary processing tasks are reviewed every month.  System updates and processes are reflected within the full GDPR policy as data sets, also available upon request using the contact details above.

Management access levels are restricted to admin staff only.

GDPR metrics have been recently implemented, and the company has been provided with a monitoring framework to revise privacy and quality control to conform to the EU regulation from 25th May 2018.

Password policies follow the standard strong password procedure and data is kept secure, with several backup and perimeter hardening controls to prevent damage or breach.

 

Marketing:

Collection of data is on request only and the company communicates casual data using Mailchimp.

Other necessary tasks are addressed on individual merit.

 

Advertising:

Advertising of services is supported on the public-facing company domain and social media including Twitter, Instagram, Facebook and LinkedIn.  No personal data is permitted on any of these platforms.

 

Data Analysis and Retention:

Retention of private data by legal obligation is kept for six years following termination of services as an employee, either paid or voluntary.

There is no special data and the company’s policy of data retention has been classed as very LOW risk.

 

SARs (Subject Access Requests):

Subjects have the right to obtain data that the company holds on them at any point. This can be obtained from the contact information at the top of this page.

Data portability is provided in a range of formats, via the online portal, emailed and encrypted PDF, or a one-time pad link to enable security.

Data can be provided in the form of writing or via telephone conversation.

Data can be withdrawn at any point from the storage by means of service termination, but will remain in archive for the legal duration of six years for employees.

The right to complain must in the first instance be through support offered via the website contact page or email directly to info@the-rsc.co.uk

If this cannot be resolved, the subject may escalate to the RSC Chair.

Following unresolved dispute from this point, please refer to the Terms and Conditions included at the footer of the main website to proceed with legal escalation.

The right to restrict processing can be made with immediate effect any point of your choosing.

The right to rectification can be made with immediate effect following the discovery of any inaccurate information we hold.

This rectification may only be permitted by the subject themselves.

SARs are logged on request.

 

Cookies Policy

What are cookies?

  1. We and our business partners collect information about your use of our website through cookies.
  2. Cookies are small text files that are stored on your computer, tablet or smartphone. Their purpose is to collect information relating to how you use our website, how you reached it, what sort of device you were using and your internet browser type.
  3. Cookies can help to display the information on a website in a way that matches your interests. Most major websites use cookies.

What cookies are used on this Website?

The cookies we and our business partners use on this website are broadly grouped into the following categories:

  1. Essential – Some of the cookies on our website are essential for us to be able to provide you with the service you have requested.  An example of this would be a cookie used to enable you to log into your account on the website or which allows communication between your browser and the website.  Our cookie preference cookie described in the section “How can I reject or opt out of receiving cookies?” is also an essential cookie. You may not be able to use our website without these cookies.
  2. Analytics – We use analytics cookies to helps us understand how users engage with our website. An example is counting the number of different people visiting our website or using a particular feature, rather than the total number of times the website or feature is used. Without this cookie, if you visited the website once each week for three weeks we would count you as three separate users. We would find it difficult to analyse how well our website was performing and improve it without these cookies.
  3. User Cookies – We use cookies to improve your experience by remembering your preferences so we know how you like to use our website. An example of this would be remembering you so that you are served with the same content or to remember you when you come back to the site.
  4. Social Sharing – We may use third party cookies to allow you to share content directly on the social networking/sharing sites like Facebook, Twitter or Google+. Examples would be if you wanted to “like” or “tweet” about us or our products or services. Please see our “Third Party Cookies” section below for more details.
  5. Interest-Based Advertising – You will have noticed that when you visit websites you will be shown adverts for products and services you may wish to buy. The money made by website owners for showing third party adverts on their websites often pays for the cost of running the website and therefore usually allows you to use the website without having to pay a registration or usage fee. To try and ensure that the adverts you see are relevant to you third party cookies may be used to collect information about the types of things that interest you, for example websites you visit and the geography that you are based in. Having these cookies does not increase the number of adverts you will be shown, but simply makes the adverts you see more relevant. Please see our “Third Party Cookies” section below for further details.

How can I reject or opt out of receiving cookies?

If you do not wish cookies to be stored on your machine, you can do the following:

  1. Delete the cookies from your browser. Most browsers also allow you to prevent all or some cookies being stored on your machine in the future. For more information on how to delete or disable cookies from your browser please use the “help” function within your browser or alternatively visit http://www.allaboutcookies.org/
  2. Please note that we can’t always control third party cookies that are stored on your machine from our website and where this is the case you will need to visit the relevant third party’s website directly to manage cookies stored on your machine by them. Please be aware that disabling cookies may impact the functionality of this website.

Third party cookies may be in use and parties are mentioned in the Privacy Policy.