Privacy Statement - Farm Carbon Toolkit

Introduction

At the Farm Carbon Toolkit, we are committed to maintaining the trust and confidence of all visitors to our website and users of our services. This Privacy Statement explains how we will use the information we collect about you, from you and from other sources, what you can do about that and generally a bit about the rights you have. If you have any questions about what you read here, please email us at: info@farmcarbontoolkit.org.uk.

About You

This policy is intended for everybody with whom we interact. This includes:

People who are using Farm Carbon Toolkit’s services;
Suppliers we deal with;
People who connect with us with a view to securing employment or initiating some kind of business relationship;
People to whom we market Farm Carbon Toolkit; and
People who are casually browsing our website.

Not everything we document in this policy will be relevant to you, depending upon which of these categories you fall into.

By engaging with us, you accept the terms of this Privacy Statement, however nothing in this statement affects your standing under any Applicable Law (see below as to what that means).

About Us

The Farm Carbon-Cutting Toolkit Community Interest Company is a company incorporated in England under registered number 07220963 and whose registered office is located at Blackbirds Perch, St. Martin’s, Isles of Scilly, England, TR25 0QN. The Farm Carbon-Cutting Toolkit Community Interest Company trades as Farm Carbon Toolkit and provides training and personal development services to the staff of our clients.

Where applicable, we are the data controller under applicable law and when we refer to “us”, “we” or “our” in this policy and any related documentation, we referring to The Farm Carbon-Cutting Toolkit Community Interest Company.

Applicable Law

As an individual law, the law that applies to you is the law where you are. However, this policy is prepared and the operations it governs our designed to be compliant with the following laws and regulations:

The Data Protection Act 2018 (“DPA”) – this is the law that governs the use of “Personal Data” (which we will also refer to as your “information”) in the UK;

The General Data Protection Regulation (“GDPR”), Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, which governs the use of personal data relating citizens of the European Union.

There are other regulations that impact these activities too, such as the controls over the use of cookies, email marketing and so on. When we refer to “Applicable Law”, we are referring to all of these.

Terminology

In this policy, we make repeated reference to various terms. These terms are defined in more or less the same way across the DPA and the GDPR, since those laws are intended to provide equivalent protection across the UK the EU. Here’s what we intend these terms to mean.

Explicit consent: means specific, informed, and freely given consent,

Anonymisation: means rendering personal data impossible to link with an identified or identifiable natural person, even through matching them with other data,

Data subject: means an individual, information about whom is to be processed in accordance with this Privacy Statement,

Personal data: means any information relating to an identified or identifiable natural person such as yourself, which information we’ll also refer to as your information,

Processing of personal data: means any operation which is performed on personal data, wholly or partially by automated means or non-automated means which form part of a data filing system, such as collection, recording, storage, protection, alteration, adaptation, disclosure, transfer, retrieval, making available for collection, categorization, preventing the use thereof,

Applicable authority: means the Information Commissioner’s Office in the UK, the European Commission in the European Union and equivalent authorities in the other jurisdictions,

Data processor: means the natural or legal person who processes personal data on behalf of the data controller upon its authorization,

Data filing system: means the system where personal data are processed by being structured according to specific criteria,

Data controller: means the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data filing system,

Personal data storage and disposal policy: means the policy which data controllers issue as a basis for erasure, destruction and anonymization of personal data and determination of maximum storage period for the purpose for which personal data are processed,

Individuals: means natural persons,

Users: means individuals who use our services in managing the carbon emissions of their own businesses or those of their customers,

Clients: means businesses to whom we provide services,

Operators: means individuals who use our services on behalf of Clients,

Others: means other individuals whose personal data we process but who are neither Operators nor Clients.

Our Promise

All information that you provide to us or which we might gather about you from other sources shall be processed:

within the framework of your explicit consent through your approval of this Privacy Statement in accordance with Applicable Law; or
whenever it is directly related to the fulfilment of our obligations under a contractual relationship you have with us, if you do have such a relationship with us; or
for us to fulfill obligations we have to you or to comply with Applicable Law and other legislation; or
for other purposes determined to be “legitimate” under Applicable Law.

All personal data that we collect shall be processed in accordance with the principles listed in Applicable Law. We will endeavour to keep your information up-to-date and to process it correctly, only when necessary and then only for specific, clear and legitimate purposes. We will process that information in a limited and prudent manner related to the purpose of processing and we shall preserve it as long as is necessary for the purpose of processing or as required under Applicable Law.

The Information We Will Process

We may process your personal data in order to deliver services to you if you are looking for work with or for us, to deliver services to our clients, to support the companies in our portfolio or participating in our programmes (or alumni of those programmes) or in order to run our business.

Our objectives are to:

deliver services to our clients so as to help their workers develop and improve their skills and knowledge; and
market our services to organisations in order to secure more such clients.

Depending on our relationship with you, we will process some or all of the following information about you and about individuals whose information you share with us:

ID data: Name, surname, birth date, gender, nationality;
Contact data: Email address, address, phone number;
Employment data: Employer name, employer location;
Sensitive personal data: In the unlikely event that you provide to us in any way (whether written or electronic form, orally etc.), fingerprint, information on the membership of a political party, association, foundation, union, information on or information that may suggest religious or philosophical view, ethnic origin and race, information on health or sensitive personal data which are recorded to the automatic sound recording system during phone calls with our staff members, then your voluntary provision of that information will constitute your explicit consent to us to process that sensitive personal data when you approve this Statement. We will process any sensitive personal data you provide strictly in accordance with applicable laws;
Visual and auditory data: Photographs and audio recordings of you and perhaps other individuals;
Website usage data: Website login frequency/times, the pages you visit, the site you linked from to reach us, the technology you use in order to view our website (operating system, desktop/mobile);
Miscellaneous: all information about you and your colleagues or clients which is related to your business that you may have recorded on Farm Carbon Toolkit, notes regarding individuals where phone calls have been made.

If you provide to us personal information concerning any other individual, you do so having confirmed to us (by accepting the terms of this Privacy Statement) that you have that individual’s permission to share that information with us. Having shared information relating to another with us, we may use that information for any of the purposes set out in this Statement, depending on the context.

How We Collect Your Information

We collect your personal data for the purpose of fulfilling our legal and contractual obligations, complying with regulations or to pursue our legitimate business interests as follows:

This information about you is collected by your input of information (which may include audio and images) to our website and/or through phone calls and email or other messaging exchanged between you (or your employees and representatives) and our staff members. If we deem it to be necessary, we also collect your personal data through audio recordings we obtain during phone conversations we have with you with the objective of improving our services and/ increase satisfaction levels generally. We also collect your personal data electronically through cookies used in our website to improve our website/platform/applications by following their usage and making them more productive, useful and functional, as stated in detail in our cookie policy.

Personal information concerning your employees and representatives is collected for the purpose of communication through forms completed and emails and messages sent by you and phone calls made with you, your employees and representatives and other communication between you and us. By transferring your employees’ and representatives’ personal information to us in this way, you hereby declare and undertake that you have obtained such employees’ and representatives’ explicit consents for that purpose, in accordance with Applicable Law.

Why We Process Your Personal Information

We will process your personal information to:

Fulfil our contractual obligations in the provision of our services generally,
Form and record profiles and gathering information concerning your use of our services and to record your engagement with content that we provide,
Return your calls and reply to your emails/messages and answer your requests for help/support,
If there’s a complaint regarding the services we provide, resolve that complaint,
Conduct correspondence with you via email or some other form of electronic messaging, social media or telephone calls,
Conduct the financial management of our business, including preparing reports required for that purpose,
Audit customer satisfaction and thereby increase our service quality,
Conduct analyses and studies as part of our sales and marketing activities and financial planning, updating existing terms of work, operation and use,
Improve and enhance our existing and developing systems and processes and market our services,
Develop, update and enhance our software and applications for our own use possibly with the assistance of external developers,
Trace your actions on our applications and website/websites and based on these, provide you a personalised, easier, faster and higher quality service, increase our existing service quality, and in doing so remembering your various preferences,
Support and inform potential clients when we consider it necessary or appropriate.

Personal information obtained from you, members of your staff or other service providers may be processed to communicate with you, them or their respective companies as the case may be. That information may be provided to founders to communicate with our clients or vice versa when we consider that to be appropriate and for such founders to participate in our programmes or otherwise engage with our clients.

We may use personal information about you to conduct other commercial operations, to operate marketing and advertising activities to you, to improve the experience of others, to make any kind of contact with you within the scope of our contractual obligations and terms of use, to send publications, reports, bulletins, notifications to you, to answer your questions and provide you with a service of good quality, to inform you about new services, to market to, to communicate with you as necessary, to make surveys and market research and to fulfill our legal obligations generally.

At the point at which we transfer the personal information of our users and others to a third party, unless that party is conducting operations on our behalf using that information, that party becomes a data controller in respect of that information. As data controller, that party shall comply with legal obligations under Applicable Law regarding the personal information of users and others and we shall not be liable should they fail to comply with those obligations.

Any individual may request the erasure, destruction and anonymisation of any personal information that they have provided and if they do, we shall administer that request as quickly as we reasonably can. If you wish to do this, the most efficient way to do this is to contact us at info@farmcarbontoolkit.org.uk telling us who you are, what information you wish us to identify and what you wish us to do with that information.

Where requests or demands are made in compliance with applicable law, personal information will be shared in accordance with administrative authorities, prosecutors and courts. Should your personal information become subject to any kind of dispute or judicial or administrative request we are a party to, such personal data may be shared with courts, prosecutors, attorneys, experts, mediators to enable us to defend ourselves legitimately and we may process such personal data for that purpose.

You must inform the individuals whose personal data you convey, transmit or otherwise give to us, and obtain their explicit consent for our collection and processing of their personal data. In accepting the terms of this Privacy Policy, you hereby confirm that you have obtained all relevant consents when you share the information of people whom you appoint as references, contact persons, employees, representatives, etc. or recommend to our services and you represent and warrant that information you share does not contain trade secrets and/or confidential information of third parties. We reserve our rights in this respect and you will indemnify us and hold us harmless against any loss, damage or other harm we suffer as a result of your failure to secure such consent.

Where We Might Transfer Your Personal Information

Personal information you provide to us (or about you that we may obtain from elsewhere) may be transferred:

to our product and service suppliers and other suppliers for the purposes of ensuring our service quality and maintaining our services;
where you are engaging personally with our services as we deliver these services to our client, to that client for the purpose of the delivery of our services;
to our relevant product and service suppliers for the purpose of sending mass or individual emails or SMS or other messages to individuals engaging or who have engaged with our services or who have signed up to our mailing lists all of which for the purpose of informing those individuals about our services or to conduct correspondence with them about our business or services;
may be transferred to third party software and hardware providers and providers of the cloud services we use for maintaining our data;
may be transferred to service providers and firms we work with, for our sales and marketing activities, to increase our service quality, to improve and develop our products and services and for all kinds of reporting activities related to our services, to create/develop advertisements specific to our business and visitors to our website, and for identifying and following where our customers, their users and other visitors of our website have browsed or used the information and functionality we provide.

Although the personal data provided by you may be used for the sector reports, country reports and other reports we prepare, these reports will not contain information that identifies you. We may transfer such reports to those we deem important for the sector, potential clients, investors and other private or public institutions and organisations that may be interested in such reports. However, please note that we will provide reports to your employer concerning your use of our services and engagement with our content and these reports may identify you.

Save where provided for to the contrary by Applicable Laws, your personal information will not be transferred to third parties without your consent.

Your information will not be transferred beyond the jurisdiction from where that information is obtained without your consent save where permitted to the contrary by Applicable Law.

Your Rights

In accordance with Applicable Laws, you may

ask us to confirm whether your personal data is being processed by us or not,
if it is, request the details about this from us,
ask us to confirm why your information is being processed,
ask us to identify the third parties to whom your personal information is being transferred and whether any such third party is located beyond the jurisdiction from which you provided that information,
request the rectification of the incomplete or inaccurate information, if any,
request the erasure or destruction of your personal information as permitted by applicable,
request details of the operations carried out pursuant to sub-paragraphs (e) and (f) involving third parties to whom your personal information has been transferred,
object to the occurrence of a result concerning you that results from the analysis of your information where that information is processed solely through automated systems,
claim compensation for the damages arising from the unlawful processing of your personal information if applicable.

You may make any of the above requests or demands by email from any email address you have registered with us for the purpose of accessing our services. You may also make these requests or demands by post at the addresses provided below, in which case such a request must bear your original signature together with that of any other data subject that may also be the subject of your request. If you have not registered with us or you have made these demands or requests by post, you can still make the request or demand but we may ask you to confirm your identification with reference to the production of personal identification documents (passports, driving licences, etc) and/or by asking you questions intended to confirm your identity.

You must also include your full name, surname, signature, identity number (if applicable), nationality and passport number, correspondence address, email address if available, telephone if available together with the relevant demand/request. Related documents and information should be attached to your request, which should be stated clearly and lucidly. Your request will be evaluated pursuant to Applicable Laws and applicable authority decisions. Only requests we find to conform with these requirements will be implemented and we will inform you when those requests or demands are dealt with.

When appropriate we may accept or refuse a request or demand with an explanation of the grounds for our decision in accordance with applicable laws. Our response will be notified to you in written or electronic form.

Our response will include the information about you that we hold as data controller, which may include your full name, nationality, together with your email, telephone and your address.

We will resolve the demands/requests in your request as soon as possible and in any event no later than within thirty days. We will not charge for this. However, if the process requires additional costs, fees permitted by Applicable Laws may be charged. If we are found to be at fault, any fee charged will be refunded to you. We will keep you informed of the progress we make in processing your request or demand.

Contact Information

The Farm Carbon-Cutting Toolkit Community Interest Company

Contact: info@farmcarbontoolkit.org.uk

Address: Blackbirds Perch, St. Martin’s, Isles Of Scilly, England, TR25 0QN