Fair Processing Notice

Use of Personal Data

Oracle Cancer Trust will use the personal data collected from you for the following purposes:

• to provide you with the information and services that you request from us;
• to administer your donation (including processing gift aid) and your fundraising;
• to ensure that content from our site is presented in the most effective manner for you and for your computer;
• to identify you and manage any accounts you hold with us;
• to ensure we have your preference as to how you would like to be contacted; and
  to improve our services to you.

You hereby confirm that you are consenting to Oracle Cancer Trust’s use of your personal data for the aforementioned purposes(s) and are granting Oracle Cancer Trust permission to carry out those actions and/activities. You may withdraw your consent at any time by contacting Oracle Cancer Trust.

What is Personal Data?

The EU’s General Data Protection Regulation (“GDPR”) defines “personal data” as:

“any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.

The GDPR classifies certain data as belonging to “special categories”, as follows:

• Racial origin;
• Ethnic origin;
• Political opinions;
• Religious beliefs;
• Membership to a trade-union;
• Genetic data;
• Biometric data;
• Health data;
• Data concerning a natural person’s sex life;
• Sexual orientation; and
• Other.

The GDPR requires that consent is provided by the data subject for all types of personal data, including those pertaining to the special categories set out above and otherwise. Consent must be explicitly provided.

When Oracle Cancer Trust requests sensitive data from data subjects, it is required to confirm why the information is required and how it will be used.

Why does Oracle Cancer Trust need to collect and store personal data?

Oracle Cancer Trust is committed to ensuring that all personal information collected and processed is appropriate for the stated purpose(s) and shall not constitute an invasion of your privacy. We may share your personal data with third party service providers who are contracted by us and we shall ensure that they will hold your personal data securely and shall use it only in order to fulfill the service for which they are contracted. When there is no longer a service need, or the contract comes to an end, the third party will dispose of all personal data according to our procedures. We will never share your personal data with third parties until we have received your consent, unless we are required do so by law.

How Oracle Cancer Trust uses your information

Oracle Cancer Trust will process your data (i.e. collect, store and use) according to the requirements of the GDPR at all times and shall endeavor to keep your personal data up-to-date, ensuring its accuracy and will not keep it for longer than it is required. In some situations, there are set legal requirements for the length of time that Oracle Cancer Trust will retain your personal data but usually Oracle Cancer Trust will use its discretion, ensuring that personal data is not kept outside of our usual business requirements.

We shall never be intrusive or invasive of your personal privacy and shall not ask you to provide data that is irrelevant or unnecessary and we will enact strict measures and processes to ensure that the risk of unauthorised access or disclosure of your personal data is minimised as much as possible.