Chaitech is a UK registered charity no. 1191814. Our office location is:
163 CITY ROAD
WHY DO WE PROCESS YOUR DATA AND BASED ON WHAT?
We help young people, including children, get into technology-related enterprise through the provision of training, grants, and facilities, sponsoring or undertaking research.
We process the data of our beneficiaries, trustees, mentors, partners, donors, to fulfil the above aims, including to provide our training and programmes, to prevent fraud or other dishonest behaviour, and to ensure the welfare of our beneficiaries. Where the data is provided to us based on consent, as may for example be the case with applications and publications, such consent may be withdrawn by you at any time without affecting further processing.
Applications for assistance by children below the age of 13 shall only be accepted if authorised by the holder of parental responsibility over the child.
DATA STORAGE, SHARING AND TRANSFERS
Data may be shared with our mentors, storage-, communications- and other online services providers. Where that includes overseas transfers to countries that are not subject to an adequacy decision, we are likely to transfer the data using Standard Contractual Clauses.
We keep the data for as long as it is necessary for the purpose. This is for the duration of our programmes and other activities, but also longer, to maintain communications with our community, notably of our beneficiaries and mentors. Please see your rights below in case you no longer want to be considered part of Chaitech community.
Under the General Data Protection Regulation (GDPR), you are entitled to certain rights in relation to our handling of your personal data, as described below.
- Request access to your personal data that we hold about you (commonly known as a “data subject access request” or DSAR). This enables you to receive a copy of the personal data we hold about you or are otherwise processing;
- The right to obtain without undue delay the rectification of inaccurate personal data concerning you, including the right to have incomplete personal data completed e.g. by means of providing a supplementary statement. This enables you to have any incomplete or inaccurate data we hold about you corrected. We will need to verify the accuracy of the new data you provide to us;
- Restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data where the data is wrongfully processed but should not be erased for a reason listed in Article 18 (1) GDPR;
- Right to erasure (‘right to be forgotten’). This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it, except for information where a contract or legitimate interest continues to exist (e.g. to pursue claims);
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third-party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms;
- You may exercise your right of data portability in a common, machine readable form by obtaining your data by sending us an email request.
- If you are unhappy with the way we process your data, you may complain to ico.org.uk . However, it may be beneficial to try to first resolve the matter with us.
The above rights may be exercised by emailing our trustees at