1 General Information
We’ll tell you:
- How we collect your information
- Why we are permitted to process your information
- What purpose we are processing it for
- Whether there are other recipients of your personal information
- Whether we intend to transfer it to another country, and
- Whether we do automated decision-making or profiling.
2 Contact information
Extinction Rebellion (UK) is the controller for the personal information we process, unless otherwise stated.
You can contact us by email.
You can contact us at firstname.lastname@example.org . Please use the subject line: ‘Data Protection’.
3 How do we get information?
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- You are a Rebel and have signed up.
- You subscribe to our e-newsletter.
- You wish to attend, or have attended, an event.
- You have applied to volunteer with us.
- We also receive personal information indirectly, in the following scenarios:
- A volunteer of ours gives your contact details as an emergency contact or a referee.
4 What purpose are we processing it for?
We will process your data for the purpose of:
- Communicating in relation to ongoing Rebel activity; and associated correspondence
- Facilitating Rebel activity in local, regional and affinity groups; including training
- Keeping in touch with relevant news and related correspondence
- Promoting, or managing events
- Volunteer related matters
- Other legitimate interests (for example: inc, but limited to, emergency contact numbers or references)
5 Our lawful justifications for processing
Ordinary personal data
Where we process ordinary personal data, we rely on one of the justifications below.
In many cases, especially when we are dealing with Rebels or others who use our services, we will clearly ask for and rely on your consent to processing of your personal information, for example when you provide information in an online form. Where we rely on your consent, you can withdraw it at any time,
Sometimes, our processing is necessary for our legitimate interests or those of another party, but we will never rely on this justification when those interests are overridden by your rights and interests in relation to your data.
In very rare cases, generally a life or death situation, we may need to process personal data to protect your or another person’s vital interests.
In some circumstances we are legally obliged to share information. For example, under a court order (where we have considered we have a lawful basis on which to share the information and document our decision making).
Special category data
Special category data is information about a person’s racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, physical or mental health, and sex life and sexual orientation. Because of its sensitivity or potential sensitivity, there are tighter rules that apply to its processing. There are also tighter rules around criminal offence data. We will only ever ask for/process such information if we need to do so, and if we have one of the lawful justifications set out below.
Where we rely on this, we will clearly ask for and rely on your explicit consent to processing your personal data for specified purposes, and, as in the case of ordinary personal data, you can withdraw your consent at any time.
Processing not for profit movement for its legitimate activities
This permits processing by us as a not for profit movement with political and philosophical aims in the course of our legitimate activities.
Establishment, exercise or defence of legal claims
This is one of the lawful justifications, for example, for our Arrest Watch Support Services.
6 Your Data Protection rights
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.
Your right of access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process. You can read more about this on the ICO website here.
Your right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies. You can read more about this on the ICO website here.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances. You can read more about this on the ICO website here.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances. You can read more about this on the ICO website here .
Your right to object to processing
You have the right to object to processing, if we are able to process your information because the process forms part of our legitimate interests. You can read more about this on the ICO website here.
Your right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated. You can read more about this on the ICO website here.
You are not required to pay any charge for exercising your rights. We have one month to respond to you.
Please contact us at email@example.com if you wish to make a request.
7 Sharing your information
We will not share your information with any third parties for the purposes of direct marketing.
We use data processors who are third parties who provide elements of services for us. These include organisations that provide our IT infrastructure, and manage the provision of goods and services to us.
We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
Where we contract with third parties for the processing of your data, these may be located outside the EU (e.g. in the USA). When this is the case, we ensure the contracts we have in place with those third parties meet the requirements of data protection law.
Arrest Watch Support Services
From time to time, we may provide services in conjunction with organisations such as Green and Black Cross, and in those circumstances we are joint controllers with them. You can view Green and Black Cross’ Privacy Notice here.
8 Links to other websites
Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.
9 Your right to complain
We work to high standards when it comes to processing your personal information. If you have queries or concerns, please contact us at firstname.lastname@example.org and we’ll respond.
If you remain dissatisfied, you can make a complaint about the way we process your personal information to the ICO as the UK supervisory authority. Please follow this link to see how to do that.
11 Visitors to our website
When you visit extinctionrebellion.uk, we use third-party services, including Google Analytics, to collect standard internet log information and details of behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
If we do collect personal data through our website, we’ll be upfront about this. We’ll make it clear when we collect personal information and we’ll explain what we intend to do with it.
We collect information about how you use our website using cookies and similar technology. This includes your viewing history, IP addresses, device identifiers and information about how long you have stayed on certain pages or what pages you have clicked on.
Search queries and results on our website are logged anonymously to help us improve our website and search functionality. No identifiable personal information is collected by us.
Purpose and legal basis for processing
The purpose for implementing the above is to maintain and monitor the performance of our website and to constantly look to improve the site and the services it offers to our users. The legal basis we rely on to process your personal data is article 6(1)(f) of the GDPR, which allows us to process personal data when its necessary for the purposes of our legitimate interests.
What are your rights?
As we are processing your personal data for our legitimate interests as stated above, you have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.
For more information on your rights, please see the ICO website: ‘Your rights as an individual’.
12 Automated decision-making or profiling
We do not use automated decision making. We may occasionally profile your data for the purpose of recruiting Rebels, who wish to Rebel for Life.