Boris2020.org collects data in order to inform you and activists like you about what you can do to help achieve our aims, and to give you the opportunity to be more involved in bringing about the changes that Boris2020.org campaigns for. It also believes in and takes seriously its duty to keep your data secure so you can have confidence about our campaigning.
“Boris2020.org” is referred to as “we” and “us” in this document unless otherwise specified.
1. How your data is collected
1. Who collects your data
Boris2020.org is run by CampaignAction Limited, the controller of your data, registered as such with the Information Commissioner’s Officer in the UK, and is responsible for the collection and processing of your data.
Boris2020.org can be contacted via info@Boris2020.org
1.2 What data is collected
In most circumstances we will only ask you for your name and contact details, perhaps payment details if you are donating. Sometimes we ask for additional information about you and your views and interests and activities you take part in, if this helps in campaigns or in keeping campaigns relevant to you. Additional information we may ask you to provide may include geographic information (for example, your postcode and constituency), your willingness to volunteer, your date of birth, gender, ethnicity, employer and occupation, whether or not you are a member of a political party, or other organisation, and whether or not you are a student.
If you donate to Boris2020.org then your financial details will only ever be stored by third parties and our banking service providers. We may also securely store details of when you made a payment, how much you paid and when and how much you intend to pay in the future on our database. If you make payments using a cheque or cash, we will also securely store physical records of this. If you donate more than £500, we will also maintain records of this in order to comply with our duties under the Political Parties Elections and Referendums Act 2000.
We will also collect information such as your Internet Protocol (IP) address for monitoring and improving the effectiveness of our website services as well as its security.
1.3 Where we obtain your data from
In most cases, we will obtain your data directly from you, using an electronic or physical form, or verbally.
We may sometimes supplement your data with other publicly available information, where it is necessary to do so in order to comply with a contract we have with you, one of our legal obligations or legitimate interests, or where you have given other organisations permission to share your data with us.
2. How your data is kept secure
2.1 What Boris2020.org does to keep your data secure
We have physical, electronic, and managerial procedures to help safeguard, prevent unauthorised access to your data, maintain data security, and correctly use your information. These include protecting your information using firewalls, password protection and, where appropriate, encryption.
We use third party payment services in order to process financial transactions. These services may process your financial details. These services are registered with the Financial Conduct Authority and use advanced encryption technology in order to protect transactions and your data.
Boris2020.org has agreements with all third-party service providers we use in order to process your data to ensure that they take appropriate measures to ensure the security of your information.
We ensure that all individuals who have access to your data sign data processing agreements and non-disclosure agreements, which detail their duties to keep your data secure and not to disclose it to anyone else without our authorisation.
2.2 Who has access to your data
We will share your data with persons or organisations in order to further our aims.
We use service providers in order to process your information.
In Boris2020.org and CampaignAction Limited, only those authorised to process your data can access it. We make sure that staff and volunteers see only the data that is necessary to perform their tasks.
2.3 International Transfers
In order to process your data for the purposes outlined below, we may need to transfer your data to countries or jurisdictions outside the EEA. In each case, we ensure that our suppliers provide adequate protection for the rights of data individuals in connection the transfer of their personal data. Currently, we expect all suppliers to use a standard contractual clause approved by the European Union or be subject to Privacy Shield scheme in the United States.
3. How your data is processed
We have and collect data for use in Boris2020.org’s campaign and to build a lasting network of support. It will be used to help us provide you with information to match your interests. We may also use it to alert you of activities you may be interested in and events happening in your area now and in the future.
We build a lasting network of support for Boris2020.org’s campaign by using your data to improve our communications, helping them reach you and people like you or reach people that they have not reached before.
Information that matches your interests that we will provide you with and events happening in your area now and in the future that we will alert you to are as follows:
- Information about our campaigns and campaigns we support
- How you can help support and/or fund our campaigns and campaigns we support
- How you can campaign with us and campaigns we support
- How you can volunteer with us and campaigns we support
We may also process your data for other purposes, and will inform you that we are going to do so when we collect the data from you, or at some other appropriate time. Other purposes for which we may process your data include:
- Complying with our legal obligations
- Processing your donations
- Answering your enquiries
- Responding to complaints
4. Why we process your data
We process your data on the following bases:
- Legal obligation
- Legitimate interest
We process most of the data that we hold on the basis of consent. At times, we process your name and contact details, payment details and additional information about you and your views and interests and activities you take part in on the basis of consent. Where we process your data on the basis of your consent, that processing of your data will be restricted to those types of processing to which we have received your consent for the purposes for which you have consented to its being processed and we shall indicate which categories of data we are going to process on the basis of your consent.
Boris2020.org may have a contract with you. If it is necessary for us to process your data in order to comply with any other contracts we may have with you, then when we enter into the contract with you we will inform you of this, as well as informing you of the types of processing that it will be necessary for us to carry out, the categories of data that we will process and the purposes of our doing so.
We have various legal obligations, such as obligations to report donations under Political Parties Elections and Referendums Act 2000. If you make a donation, then we will process your name, details of whether or not you are on the electoral roll, and details of when and how much you donationed on the basis of our legal obligations for the purposes of maintaining records of and reporting on regulated donations to us.
Boris2020.org has a legitimate interest in producing and improving its political communications in a democratic society in order to build a lasting network of support. These communications are defined as “marketing” in the data protection legislation. We process your name and contact details and additional information about you and your views and interests and activities you take part in on the basis of this legitimate interest, in order to improve these communications and help them reach you and people like you or reach people that they have not reached before.
5. How Boris2020.org will communicate with you
For any direct “marketing” communications about our campaigning we will only contact you via email, text, or telephone if we have your permission to do so. We may occasionally send you campaigning materials through the post.
You may also see campaigning online and on some social media sites if you have interaction with us before.
To respond to your queries we will contact you either via the medium you used to contact us or by a medium you have indicated you would like us to respond with. If it is necessary to contact you for any administrative purposes then we will usually try to email, text or call you, usually in that order, depending on what contact details we have available for you.
6. How Boris2020.org Protects Children’s privacy
No information should be submitted or posted to Boris2020.org by children under the age of 13 without prior consent of their parent or guardian.
7. How you can affect the way Boris2020.org communicates with you
When you interact with us, we will ask you to tell us how you prefer to be contacted.
You can unsubscribe from contact at any time.
You can contact us via info@Boris2020.org
You can request to access or rectify your data and requests for us to restrict the ways in which we process your data, provide you with the data we hold on you in a portable format and log an objection you have to our processing of your data.
You also have the right to ask us to erase data that we hold on you.
8. How to find out more or make a complaint
You also have a right to make a complaint to the Information Commissioner’s Office. Information on how you can do so is available here.
You can contact our Data Protection Officer at info@Boris2020.org subject: “DPO enquiry”.