Privacy Policy

Who we are

In accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Peshkar (a Company Limited by Guarantee, No. 3918088, and a Charity in England and Wales, No. 1091092) is a Data Controller.

Registered office: The Old Museum, Greaves Street, Oldham, OL1 1DN

The Data Protection Officer for the organisation is Steph Meskell-Brocken. Please contact Steph at steph@peshkar.org for any enquiries about data protection or requests for data.

Key definitions

• GDPR (General Data Protection Regulation) supersedes the original Data Protection Act.
• PECR (Privacy and Electronic Communications Regulations) works alongside GDPR.
• Personal data - anything that can identify a person.
• Sensitive personal data - includes ethnicity, sexual orientation, disability status, and religious or philosophical beliefs. Genetic and biometric information is also classified as sensitive.

Whose data we collect, and why

Peshkar collects data on participants, staff members (including freelance staff), board members and partner contacts.

• Staff, board member and partner data is collected on the basis of legitimate interest.
• Participant data, including photographs and video footage, is collected on the basis of consent.

What we collect

As part of our regular monitoring, Peshkar collects:

• Dates of birth
• Ethnicity
• Postcode
• Disability status
• Evaluation comments
• Photographic images
• Video footage

How we collect it

• Project registration forms
• Project evaluation forms
• Video evaluation
• Arts Award cover sheets
• Within artistic sessions, in the creation of artworks
• Within artistic sessions, for the promotion and marketing of projects
• Online communications such as website comment forms and social media

Who we share it with

Data is shared with funders when they request monitoring information. These funders include, but are not limited to, Arts Council England, the National Lottery Heritage Fund, Oldham Council and the British Council.

Peshkar works in partnership with other organisations across the charity sector and will sometimes need to share data with them to create artworks, market and promote projects, and report to funders. When this happens, data sharing agreements are written into the partnership contract.

How we process and store data

Peshkar uses Google for email and cloud storage. Data is held in secure files on Google Drive. Only files that contain no sensitive personal data are shared across the staff team. Google is GDPR compliant and publishes details of its compliance.

We occasionally use other services, such as Mailchimp and Eventbrite, to communicate with audiences. Both are GDPR compliant - see Mailchimp's GDPR information and Eventbrite's privacy policy.

Peshkar hosts photographs on Flickr (photographic permission is sought from all participants) and video footage on YouTube, a Google service covered by Google's policies.

Peshkar artists also use Dropbox to store imagery from workshops and projects. This may occasionally include photographs or video of participants. See Dropbox's GDPR information.

Images and social media

Peshkar uses images and videos to promote projects on social media, and takes the following safeguards:

• Photographs or videos of participants under the age of 18 never feature names.
• Blog posts, or links to blog posts, that name a participant do not include any additional personal data.
• Sensitive personal data is never shared on social media.
• Historic social media posts that include images and video are cleared or hidden every five years.

How long we keep data

Peshkar holds all data for a maximum of five years of inactivity. After this, records of participants, staff and board members - including photo and video records, evaluations and forms - are deleted, and shredded if held on paper. If someone is still a valuable contact after five years of inactivity, Peshkar may contact them to ask for consent to keep their data.

This website

The Young Digitals website does not ask you to create an account and does not use advertising or tracking cookies. Some pages include content from other services, such as Thinglink galleries, YouTube videos and Google Fonts. These services may receive your IP address and set their own cookies under their own privacy policies.

Your rights

Anyone who comes into contact with Peshkar has the following rights over their data:

• The right to be informed
• The right of access
• The right to erasure (to be forgotten)
• The right to rectification
• The right to restrict processing
• The right to data portability
• The right to object
• Rights in relation to automated decision-making and profiling

To exercise any of these rights, contact the Data Protection Officer. Requests will be dealt with within 30 days, in line with guidance from the Information Commissioner's Office.

Complaints

Any complaints or concerns about data protection at Peshkar can be raised with the Data Protection Officer named above or, if unresolved, with the Information Commissioner's Office (ICO).

How we oversee data protection

Peshkar carries out privacy risk assessments on all the data it holds. This is undertaken by the Data Protection Officer and overseen by the trustee responsible for data and safeguarding. Data reports are made to the Board of Trustees at every meeting.