Who we are
1.1 The Shuttleworth Veteran Aeroplane Society (SVAS) is a registered charity (number 80095) and membership organisation who support the Shuttleworth Collection. Our website address is www.svasweb.org . As an essential part of our service to our members we collect and manage data. In doing so we observe UK and EU data protection legislation and are committed to protecting and respecting your privacy and rights.
1.2 If you have any questions about this policy or you would like to exercise your rights under the General Data Protection Regulations (GDPR) please contact our data protection officer by email at svas@shuttleworth.org or by post at SVAS, Old Warden Aerodrome, Nr. Biggleswade, Beds. SG18 9EP.
What personal data do we collect, why do we collect it and how long is it retained
2.1 Membership personal data
We collect and use personal data to supply membership services to our members. We do not use your data for any automated decision making or profiling. Your personal data includes information such as name, address, telephone number, email address as well as relevant financial and credit card information used during the processing of membership and shop purchases. Your credit / debit card data is handled securely in accordance with our Payment Card Industry Data Security Standard (PCI DSS) procedure.
Personal data is collected in a number of different ways, for example you may provide this data directly when filling in forms on this website, or when communicating directly with us by telephone, post or in person.
This data is used to enable us to process your membership and to communicate with you about your membership and relevant news and also to provide your membership benefits. For users that register on our website, we also store the personal information provided in your user profile.
Your personal data is retained for as long as you remain an active member. One year after membership lapses or immediately upon notification of death of a member or a request to be forgotten, all personal data will be deleted except Gift Aid declarations and payment records which will be kept for seven years to comply with HMRC requirements.
2.2 Website Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
2.3 Website Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
2.4 Website Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
2.5 Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.
How we protect your data
3.1 Data stored in hard copy form and on computers used for processing will be located in secure workplaces designed to prevent access by unauthorised personnel.
All computers and data files will be password protected.
Computer data files and backup files may be located in the cloud in encrypted form on computers residing outside of the UK.
Who we share your data with
4.1 We will never sell your personal data to any external organisation.
4.2 Data is only shared with companies that are essential to provide membership services to you. Your data will also be supplied to third parties we use for printing and mailing the Prop-Swing magazine, membership cards and other documents to you;
4.3 Your data may be supplied to the Shuttleworth Collection to enable them to process your membership benefits.
How you can amend your data
5.1 Registered website users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
5.2 Information can be amended on the main SVAS membership database by contacting the SVAS Data Protection Officer using the contact details in section 1.2 above.
How you can access your data
6.1 You have the right to ask for a copy of any of your personal data held by us. If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
6.2 Under the GDPR, no fee is payable and we will provide any and all information in response to your request free of charge. Please contact the SVAS Data Protection Officer using the contact details in section 1.2 above.
Disclaimer
7.1 Every effort is made to ensure that the information provided on this website and on this Privacy Policy is accurate and up-to-date, but no legal responsibility is accepted for any errors or omissions contained herein.
7.2 We cannot accept liability for the use made by you of the information on this website or in this Privacy Policy. All material accessed or downloaded from this website is obtained at your own risk. It is your responsibility to use appropriate anti-virus software.
7.3 We may change this Privacy Policy from time to time (for example, if the law changes). Any changes will be immediately posted on our website and recommend therefore that you access this site from time to time to ensure that you agree to any changes.
Document Last Reviewed May 2018