Personal Information Collection Statement
We only collect information about members that is required for the provision of our services or is required by Law. The information collected from you will only be used for the purpose of processing your enquiry, order or membership to the Alderney Chamber of Commerce services or for processing your transactions and managing your account efficiently and securely. We collect and maintain a variety of personal data including names, email addresses, business addresses, demographic information such as the industry sector of the business. We do not collect personal data about individuals except when there is a legitimate business requirement or when such information is provided on a voluntary basis.
We treat the information you give us freely as private and you have the right to access any information we have about you at any time to check whether it is accurate and up to date. If you wish to be given any information we hold about you, please contact us by emailing email@example.com.
Data storage and retention
The personal data collected is stored in our CRM system and other appropriate data management systems, both paper based and electronic. At regular intervals we will (a) review the length of time we keep your personal data for, (b) consider the purpose or purposes for which we hold your personal data for in deciding whether (and for how long) to retain it, (c) securely delete information that is no longer needed for that purpose or those purposes and (d) update, archive or securely delete information if it goes out of date.
Security and disclosure to third parties
Data subject access requests
You have the right to access your personal data held by us (“subject access request”). You may request from us a list of the categories of personal information held about you. Subject access requests must be made in writing to the details below. We will endeavour to respond to the request within a reasonable period and in any event within 4 weeks as required by the relevant provisions in the Data Protection (Guernsey) Law 2017.
It is important that the personal data we hold about you is accurate and current. We will take all reasonable measures to ensure that the personal data we hold about you is accurate. We have also implemented procedures to enable you to review and correct your personal information, should there be any changes to your circumstances or errors in the gathered data. When you make a request to access or review the personal data we hold about you, we will request you to verify your identity before the request can be fulfilled.
We may use third party provided tools to manage our social media interactions. If you send us a private or direct message via social media the message may be stored by on these platforms. Like other personal data, these direct messages will not be shared with any other organisations.
In addition to the rights of access, review and correction, you have the right to object to your personal data being processed for any particular purpose, or to request that we stop using your information. If you wish to exercise these rights, please e-mail firstname.lastname@example.org or send a letter to P.O. Box 1074, Alderney GY9 3BZ. If you have further concerns about how we use your personal data, you also have the right to make a complaint at any time to the Office of the Information Commissioner, the data protection authority. Please visit www.odpa.gg for more details on your data protection rights and how to contact them.