Privacy Statement

Who we are

The East Dunbartonshire Asset Map is run by Ceartas on behalf of the OPAL Partnership. For the purposes of GDPR, the Data Controller is Ceartas:

Ceartas
Suites 5 – 7, McGregor House
10 Donaldson Crescent
Kirkintilloch
G66 1XF

Tel: 0141 775 0433
Email: info@ceartas.org.uk

OPAL is a partnership between Carers Link, Ceartas, East Dunbartonshire Citizens Advice Bureau (EDCAB), and East Dunbartonshire Voluntary Action (EDVA). You can contact OPAL on mail@opaleastdun.org.uk or call OPAL on 0141 438 2347.

What personal data we collect and why we collect it.

Registered Users:

Individuals and organisations who wish to contribute to the Asset Map will be able to create an account by using their email address and creating a password. Please do not use the same password you use to log into your email account.

Organisations are invited to use an organisational – not personal – email address and password to register for an account. This will enable more than one person within an organisation to contribute to the Asset Map, and will minimise the amount of personal information we hold about individuals working for other organisations.

Registered users will receive cookies as described below for all logged-in users, their anonymised data will be collected by Google Analytics, and their email address will be parsed by Gravatar and Akismet as described below.

Comments:

Comments are currently not allowed on this site. However, if comments are allowed in future, they will be handled in this manner. When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment. You control this content through your agreement with Gravatar, it is not subject to our control.

Media:

If you upload images to the website, you should not upload images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website. If you need help with removing embedded metadata, please contact the OPAL team.

If you upload images to the website, you should not upload images with people’s faces displayed in them. Despite our Terms of Use forbidding it, we cannot guarantee that automated web crawlers will not use facial recognition technology on images uploaded to this website.

Contact forms:

There is no contact form on this website. There is a form for members of the public to submit community assets that are not currently on the map, but this is not intended as a contact form and should not be used as such.

If you want to contact the Asset Map team, please email us at mail@opaleastdun.org.uk or telephone us on 0141 438 2347. Our secure and encrypted email service is via G Suite provided by Google. You can find Google’s Privacy Policy here: https://policies.google.com/privacy?hl=en-GB

Cookies:

If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites:

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics:

We use Google Analytics to monitor website traffic. Google Analytics provides us with aggregate information about all website visitors, which should not be able to identify you individually. You can find Google’s privacy policy here: https://policies.google.com/privacy?hl=en&gl=uk.

You can, if you wish, install a browser extension to opt you out of all Google Analytics: https://tools.google.com/dlpage/gaoptout.

Who we share your data with.

We do not use advertising or promoted services on this website, the only personal information we ordinarily share is for website automation, in accordance with the third-party privacy policies detailed above.

The Asset Map includes functions that will provide directions from your current location to any point on the map. This functionality is provided by Google Maps, and you can block Google Maps from accessing your location with the controls of your browser.

How long we retain your data.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For registered users on our website, we also store the information they provide in their user profile. All users can see, edit, or delete their information at any time (except they cannot change their username). The website administrator can also see and edit that information.

What rights you have over your data:

If you have an account on this site, or have left comments, you can request to receive an exported file of the data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data:

Visitor comments may be checked through an automated spam detection service called Akismet Anti-Spam, provided by Automattic. You can find their privacy policy here: https://automattic.com/privacy/.

As detailed above, we may share an anonymised string generated from your email address (a hash) with Gravatar, also provided by Automattic, privacy policy above.

Your contact information:

We will not share your contact information with anyone, with the exception of contact information that you explicitly agree to make public via the Asset Map Website.

If your personal contact information is submitted to the Asset Map website as contact information for a community asset, we will contact you to agree how to process this information before sharing it on the website.

Our preference is for contact information for community assets to be organisational contact information and not personal contact information, e.g. a phone number dedicated to an organisation, rather than the personal mobile number of the person who co-ordinates the organisation; or a Facebook page for a group, rather than a Facebook timeline for an individual.

However, where this is not possible, we will agree on a case-by-case basis how to share your information. We will confirm these arrangements in writing with the relevant parties, including a regular review of the agreement. This is in addition to, and does not limit, your statutory rights to control the processing of your personal data.

Additional information.

How we protect your data:

This website is encrypted and secured by a security certificate. You can find details of how to see the details of the certificate in any browser here: https://www.clickssl.net/blog/how-to-view-ssl-certificate-details-in-every-browser

What data breach procedures we have in place:

The lead OPAL partner and Data Controller in the Asset Map project is Ceartas. Any data breach from the Asset Map would be dealt with in accordance with Ceartas’ data breach procedures. You can find out about Ceartas’ data breach procedures in their Privacy Statement here: https://www.ceartas.org.uk/privacy-statement/.

What third parties we receive data from:

We receive information about community assets, which may include personal information, from individuals and organisations across the community. If we receive your personal information in relation to a community asset, we will contact you in the first instance to establish if you agree to us processing your personal data.

If you agree to us processing your personal data, we will then agree with you how to process your information as detailed above.

If you do not agree to us processing your personal data, we will delete your personal data from the website, but as the Data Controller Ceartas will be obliged to keep a record of the transaction between you and us.

We do not solicit, buy, or otherwise obtain personal information, unless it is in relation to community assets.

What automated decision making and/or profiling we do with user data:

Comments are pre-filtered by Akismet Anti-Spam as detailed above. All other decisions are made by humans.