This privacy notice concerns personal data, as processed by the office of John Stevenson.
Date of Alteration
This privacy notice was last updated on the 05th of November 2019.
For the purposes of this document, John Stevenson is the primary ‘Data Controller’. A Data Controller is a person or organisation who determine the purposes and means of processing personal data.
How Your Data is Collected and Used
In order to conduct casework and respond to enquiries we must process the given personal data of all correspondents.
We maintain an e-mail and name based mailing list for an occasional newsletter service solely for those who have expressly signed up.
We employ the use of web analytics to monitor traffic to the website at https://www.johnstevensoncarlisle.co.uk which contains the IP address of visitors.
In order that comments may be displayed on the website at https://www.johnstevensoncarlisle.co.uk all given personal data generated by the commenter and the associated IP address of the commenter is stored in a MySQL database.
How Your Data is Processed and Lawful Basis
We process personal data generated by correspondence under the lawful basis of public task. Should explicit consent be required and not supplied, we will contact you to confirm.
We process personal data generated by mailing list subscriptions under the lawful basis of consent.
We process personal data generated by web analytics services under the lawful basis of legitimate interests.
In the course of providing the appropriate service to our correspondents we may pass supplied personal data on to third party organisations such as regulators, public authorities, agencies, trusts and other such entities.
Our mailing list is managed by Mailchimp and they, as a Data Processor, share access to the mailing list data.
Our primary web analytics service is managed by Google and they, as a Data Processor, share access to the web traffic data.
Our website is hosted by Siteground, who also provide a web analytics service, and they, as a Data Processor, share access to the website’s files, database and web traffic data.
Our website is provided by Linedot Web Design and they, as a third party Data Controller, share access to all data processed on the website as well as the website traffic data.
Unless stated otherwise below, all personal data will be held for as long as John Stevenson is campaigning to be, or is a Member of Parliament.
Any personal data generated by our primary web analytics service is deleted once it is 26 months old.
Google Analytics:- to monitor traffic on the website at https://www.johnstevensoncarlisle.co.uk
WordPress:- to allow users to leave further comments on the website at https://www.johnstevensoncarlisle.co.uk without re-entering their information
You can prevent the setting of cookies by adjusting the settings on your browser.
Your Data Rights
In line with GDPR you have the following rights:-
Right to be Informed
You have the right to obtain confirmation as to whether or not your personal data is being processed, where and for what purpose.
Right of Access
You have the right to obtain a copy of the personal data, free of charge, in an electronic format.
Right to Rectify
You have the right to rectify your personal data on our systems should it be either inaccurate or incomplete.
Right to Erasure
Your have the right, in certain circumstances, to ask that your personal data is erased on our systems.
Right to Restrict Processing
You have the right to restrict processing of your personal data in certain circumstances.
Right of Portability
You have the right to request a copy of your personal data or request that we submit it to another Data Controller in a structured, commonly-used, machine readable format.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances.
Rights Related to Automated Processing, Including Profiling
You have the right to be notified, object and request reconsideration of any automated processing or profiling.
For more information on your individual rights under GDPR please see – https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/ .
Should you have any questions or requests in relation to your privacy and this privacy notice, you may use the following contact details.
2 Currie Street