Privacy Schedule for website cookies

It should be read in conjunction with the Trust Privacy Notice.

What are Cookies?

Cookies are small text files set on your computer or mobile device which are used to recognise you and your preferences. These are intended to enhance your user experience by personalising and tailoring content and advertisements according to your preferences, provide social media features and analyse our website traffic.

Controller of your information

We are the controller of your personal information. Where we legitimately share your information outside the Trust, the recipient organisation may either be the processor or joint controller, depending on the circumstances and subject to appropriate safeguards and controls.

Cookie manager

Our cookie manager contains information about the different categories of cookies we use. Most web browsers accept all categories of cookies by default, but you can change your cookie preferences at any time using our cookie manager tool which loads when you visit the website for the first time, or anytime you visit without any cookies set.

You may also delete existing cookies via your browser settings. If you set your browser to reject cookies or accept only necessary cookies, you may still use our website, however certain features may not function correctly, for example our login facility, videos, and customer webchat.

Where we get your information from

Your information may be collected via first-party cookies and third-party cookies.

First-party cookies are set by our website directly, and third-party cookies are set by our website and marketing activity uses.

Information we collect about you

Depending on the circumstances, we may hold and process some, or all, of the information contained in Annex 1 – Schedule of personal information processed.

Special category information

We do not collect your special category information.

Criminal convictions and offences information

We do not collect your criminal convictions and offences information.

Why we process your information

Your personal information will be processed for the purposes set out in Annex 1 – Schedule of personal information processed and will not be processed for any other purpose.

Lawful basis

Your personal information will be processed under the lawful basis set out in Annex 1 – Schedule of personal information processed.

Where your information will be stored

Your information will be stored within the cookie, which is in turn stored on your computer or device.

How long we keep your information for

Cookies, and the information associated with them, will be kept in accordance with Annex 2 – Cookies used.

Who we share your information with

Your personal information may be shared internally within the Trust with individuals who are required to receive it for legitimate business purposes according to their role, and in accordance with Annex 1 – Schedule of personal information processed. Your information may be shared externally according to Annex 2 – Cookies used and Annex 3 – Schedule of personal information shared.

International transfers

We may share your information internationally depending on the nature and purpose of the cookie, particularly in relation to third-party cookies. Where we do so, it will be subject to appropriate data protection safeguards as assessed by a Transfer Risk Assessment, including adequacy decisions, contractual clauses, and the UK International Data Transfer Agreement.

Linked websites

Our websites may refer to, or contain links to, other websites.

Please note that each company, organisation, or public body operates its own Privacy notice regarding the use of personal information and cookies.

If you have a particular interest in, or concern regarding the way this will be used, you are advised to read the Privacy Notice on the relevant website. The Trust is not responsible for the privacy practices of other websites, and this Schedule applies solely to the personal information collected by Canal & River Trust.

Other processing

The Trust may analyse or profile your data for internal statistical analysis purposes. This is to analyse those who interaction with us, in order to, for example, create efficiencies in marketing, such as tailored messages to our supporters, and existing and potential customers. When used in this way, you cannot be identified by the information.

Other relevant privacy documents

Internal

Privacy Notice

Changes to this Schedule

We may change this Schedule from time to time without notice to you. This is to ensure it reflects current legislation. In that case, the ‘latest version’ date in Annex 4 will also change. Any changes to this Schedule will apply to you and your data immediately.

If these changes significantly affect how your personal data is processed, we will take reasonable steps to let you know.

Latest version

This Privacy Schedule is reviewed periodically when changes are required, and in any event every three years. If the version you are viewing is older than three years, please ensure that you have the up-to-date version by contacting [email protected]

See Annex 4 – Version Control.