What is personal data?
Personal Data is information by which you can be directly or indirectly identified. This generally includes information such as your name, address, email address and telephone number; however, it may also include other information such as your IP address or preferences and interests.
What is processing?
"Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and covers virtually any handling of data.
Who is responsible and who can I contact?
The responsible person in the sense of the DPA and GDPR is
PO Box 7663,
Glasgow G42 2JG
Web: www.wevolution.org.uk and www.smallpowerfulgroups.com
If you have any questions about the processing of your personal data by us or about data protection in general, you can reach our Communications Officer, Heather at heather@Wevolution.org.uk.
The legal bases of processing
Art. 6 GDPR specifies when data processing is permitted. As such one of the following must apply when we process your Personal data:
you have given your consent (Art. 6 para. 1 lit. a GDPR),
the data is necessary for the fulfilment of a contract / pre-contractual measures (Art. 6 para. 1 lit. b GDPR),
the data is necessary for the fulfilment of a legal obligation (Art. 6 para. 1 lit. c GDPR) or
the data is necessary to protect the legitimate interests of our company, provided that your interests are not overridden (Art. 6 para. 1 lit. f GDPR).
Processing of personal data
If you agree to join our WhatsApp group after being messaged directly, we process the personal data you have provided in accordance with your consent (Art. 6 para. 1 lit. a GDPR), the fulfilment of a contract (Art. 6 para. 1 lit. b GDPR), and our legitimate interest (Art. 6 para. 1 lit. f GDPR), for the purpose of providing the services you have requested.
This includes, among other things, notifications about the latest developments in our groups, new group members, and you may provide the following data: Mobile phone number, Username, First and last name, Status, Profile picture. Of course, we also process your chats with other users as well as the content you publish, as part of the operation of the WhatsApp group.
Your contributed text and voice messages, picture and video recordings, etc. Some of the information you choose to provide us may be considered “special” or “sensitive” in, for example your racial or ethnic origins, sexual orientation, and religious beliefs. By choosing to provide this information, you consent to our processing of that information.
Sharing of personal data
You have choices about the information your share. You don’t have to provide additional information; however, information helps you to get more from our Services. It’s your choice whether to include sensitive information and to make that sensitive information public. Please do not upload, share, or add personal data to our WhatsApp group that you would not want to be available.
Data for Internal Research or Qualitative Data Analysis
Protecting your data is of grave importance to us. In order to develop the community for the benefit of its members, we may have an external Data Analyst look at recurring WhatsApp data themes or patterns in an anonymized. Anonymised data processed by an external analyst could be kept and shared outside of WEvolution. Any data conclusions made will be for the benefit of developing the Small, Powerful Groups community, only. By joining a WhatsApp group, you are consenting to us using your anonymised data for this purpose.
Opt out and leaving (withdrawing your consent to processing)
You can unsubscribe from notifications or leave the WhatsApp group at any time using the settings options or by sending us a message.
Transfer and Disclosure of personal data
If necessary, some of your personal data will be accessible to our staff members that participate in the WhatsApp group.
Furthermore, all group participants will be able to see the data you have provided, we have neither exact knowledge nor influence on the further use of your data by the other group participants. You can leave these groups at any time via the group settings.
Finally, we would like to point out that WhatsApp, Inc. receives personal data (in particular metadata of the communication). This date is processed on servers in states outside the EU (e.g., USA). WhatsApp shares this data with other companies within and outside the Facebook group of companies.
Retention and Storage of personal data
Upon termination of the WhatsApp group, the WhatsApp group will be completely deleted along with all data retained and stored. Only in exceptional cases will some of the data be further processed in accordance with our legal obligations (Art. 6 para. 1 lit. c GDPR), if any.
Lastly, you can always delete the personal data you provide via the settings and chat menu of your WhatsApp account.
Your rights as a data subject
Every data subject has the following rights:
Right to information (Art. 15 GDPR),
Right to correction of inaccurate data (Art. 16 GDPR),
Right to erasure or a right to be "forgotten" (Art. 17 GDPR),
Right to restrict the processing of personal data (Art. 18 GDPR),
right to data portability (Art. 20 GDPR).
In addition, the data subject also has a general right to object (cf. Art. 21(1) GDPR). In this case, the objection to data processing must be justified. If data processing is based on consent, your consent can be revoked at any time with effect for the future. To exercise your data subject rights, please contact Heather at heather@Wevolution.org.uk.
In addition, you have the right to lodge a complaint with a data protection supervisory authority. The Information Commissioner`s Office (ICO) is the relevant authority in the UK. The ICO is located at Wycliffe House, Water Ln, Wilmslow SK9 5AF, UK. We would, however, appreciate the chance to deal with your concerns before you approach any Supervisory Authority.
This Policy and our commitment to protecting the privacy of your personal data can result in changes to this Policy. Please regularly review this Policy to keep up to date with any changes.
Queries and Complaints
If you believe that we have not complied with this policy or acted otherwise than in accordance with data protection law, then you should notify us.