The Canal & River Trust is a registered charity formed in 2012 to care for 2,000 miles of historic inland waterways across England and Wales. Our vision is for living waterways that transform places and enrich lives.
Your personal information
The Trust needs to collect and use personal information about a range of individuals that it interacts with. By providing information to us (either in person, by letter, phone or email), those individuals agree to the processing set out in the relevant Privacy Schedules set out below.
The Trust acts as a data controller in respect of the personal data we process. Our data protection officer is Tom Deards, legal and governance director and he can be contacted by emailing firstname.lastname@example.org
Privacy schedule for CCTV and Body Worn Cameras
Please see our privacy schedule for CCTV and Body Worn Cameras which provides detail on how we process personal data collected in our use of CCTV.
Privacy schedule for supporters
Please see our privacy schedule for supporters which provides detail on how we collect, use and share personal information of the Trust’s supporters (including Trust Friends, donors, legacy supporters and others who have responded to our mailings, campaigns or competitions).
Privacy schedule for volunteers
Please see our privacy schedule for volunteers which provides detail on how we collect, use and share personal information of the Trust’s volunteers.
Privacy schedule for governance participants and local stakeholders
Please see our privacy schedule for governance participants and local stakeholders which provides detail on how we collect, use and share personal information of the Trust’s governance stakeholders (including national and regional governance volunteers and local user group participants).
Privacy schedule for customers
Please see our privacy schedule for customers which provides detail on how we collect, use and share personal information of the Trust’s customers (including boating, mooring, angling customers and visitors to our museums, shops and other attractions).
Privacy schedule for employees
Please see our privacy schedule for employees which provides detail on how we collect, use and share personal information of the Trust’s employees.
Privacy schedule for applicants
Please see our privacy schedule for applicants which provides details on how we collect, use and share personal information of the Trust's applicants.
Privacy schedule for research participants
Please see our privacy schedule for research participants which provides detail on how we process personal information of research participants.
Please see our cookie privacy schedule which provides details, how we collect, use and share personal information by using cookies on the Trust's websites.
Photos and Videos
From time to time, the Trust will take photos and videos to promote our work. Where individuals can be identified from the footage/image, we will always obtain consent prior to use, we will not obtain consent from individuals if we are taking footage of a crowd or large group where individuals cannot be identified.
The consent form will outline where the images will be published and how long we will keep the photo for. When taking photos or videos of children under the age of 18 we will obtain parental consent. Where the Trust is carrying out photo or videos shoots, we will ensure to provide notices to inform individuals what filming is taking place, what the images will be used for an who to contact for further information.
There may be some older photos and videos on our website, where we obtained verbal rather than written consent. We rely on Legitimate Interest to use these.
When we receive a request for erasure for a photo or video, we can remove the image from future publication. However, it is not reasonable to recall or remove all current flyers or posters containing the imagery. We will endeavour to remove the photo/video from all online sites where possible, however, we do lose a degree of control once a photo/video has been placed on the internet and social media platforms.
Prize Draws and Competitions
When you login or sign up to enter a Canal and River Trust prize draw or competition then the personal information associated with your entry is controlled by the Trust. In addition, the Trust and its service providers or other agents will use your personal information, together with other information you submit to enter the prize draw/competition to manage the prize draw/competition process, select winner(s) and award prize(s).
The legal basis for processing your personal data and entry submission data is that processing is necessary to allow you to enter the prize draw/competition and to meet the relevant legal requirements. Your personal and entry submission data will be shared with our service providers and agents to administer winner selection and to award the prize(s). We will store your data only for the length of time needed to select the winner(s) and award the prize(s) unless a longer retention period is required or permitted by law.
Where your information is stored and for how long
We have measures in place to protect the security of all personal information that we hold and keep it confidential. We review these measures regularly to make sure they remain appropriate.
When sharing personal information with a third party, we will make sure that they also have measures in place to protect it and keep it confidential and agree to use the personal information only for the purposes we set out.
We will only keep personal information for as long as we need it in order to fulfil the purposes for which it was collected and for so long as we consider may be required to deal with any questions or complaints that we may receive about our relevant activities, unless we elect to retain the personal data for a longer period to comply with our legal and regulatory obligations.
We review the personal data we hold on a regular basis. If we conclude that certain personal data is no longer needed, that personal data will be destroyed.
International transfers of personal data
From time to time, the individuals or organisations with whom we share personal data may request that we transfer personal data to their operations outside the UK. On a case-by-case basis, we may agree to such transfer of personal data to operations in other EU countries and/or to countries which have data protection laws deemed acceptable by the UK.
For other countries, we will only agree to such transfers of personal data where we are satisfied that the personal data will be sufficiently protected through measures such as the approved standard contractual clauses in place between the data exporter and the data importer. Any standard contractual clauses which we put in place of export of the personal data will be available from us on request.
Automated decision making
Automated decision making is a decision made solely by automated means without any human involvement. The Trust does not carry out any activities using automated decision making.
The Trust does use location data to provide you with more relevant content specific to your local area however no automated decisions are made during this process.
- Right of access form - Anyone has the right to see the personal data that is held about them and have a copy provided to them, or someone else on their behalf.
- Right of rectification form - If at any point anyone believes that the personal data we hold about them is inaccurate, that person can ask to have it corrected.
- Right to restrict processing form - Anyone can require the Trust to limit the processing of their personal data in certain circumstances, for example, whilst a complaint about its accuracy is being resolved.
- Right to object form - Anyone can object to their personal data being processed. Where someone has given us their consent to process their personal data, they can withdraw that consent at any time by notifying us (see “Who to contact about your personal data” below).
- Right to erasure form - Anyone can request that their personal data is deleted altogether.
- Right to data portability form - In some circumstances, there is a right to have your information provided in a machine- readable format to ensure the portability of your personal data to other service providers.
It should be noted that taking any of these steps could impact upon our ability to continue our relationship with you, the provision of our services to you and our ability to answer questions relating to our services to you. Please note some of above rights are dependent on the legal basis for processing.
Personal information will generally be provided free of charge, although the Trust can charge a reasonable fee in certain circumstances.
Who to contact about your personal data
If you wish to see your personal data, exercise any of the rights mentioned above or make a complaint about how we have handled your personal data, please email email@example.com
We encourage you to let us know if your personal information changes or if you think the personal information, we hold about you is out of date.
Making a complaint to the Information Commissioner’s Office
If you are not satisfied with our response to any query you raise with us, or you believe we are processing your personal data in a way which is inconsistent with the law, you can complain to the Information Commissioner’s Office at www.ico.org.uk
Last date edited: 14 September 2021