The Bonnart Trust recognises that any user of our services, whether an individual or an organisation, has the right to expect that any information imparted by them to The Bonnart Trust will be used only for the purpose for which it is given and should not be released to anyone else outside The Bonnart Trust without the user’s consent.
The right to privacy is essential to ensure trust and confidence in the organisation and that users of our service are treated with respect and dignity. Information about the internal affairs of The Bonnart Trust is also confidential.
The Bonnart Trust stores information about:
- Scholars who are or have been funded by the Trust
- Applicants for scholarship
- Academics at the institutions with which we work
- Staff of the Trust
- Professionals working in the charity sector with whom we correspond
- Users of our website
How we use information about you
We may collect and process the following information about you:
“enquiry data” – We usually collect and retain information which you submit by way of an enquiry via our website, by email to our office or Trustees, or by telephone. This may include your personal and contact details, among other details you choose to provide.
“correspondence data” – We usually collect and retain information you provide through the course of our correspondence with you. This may include your personal and contact details, as well as any other information you chose to provide.
“Scholar data” – We usually collect and retain information about our Scholars and those applying for a Scholarship sponsored by The Bonnart Trust. This data may include your personal and contact details as well as information about your education and work experience and any other information that you chose to provide. This information may also include sensitive data. We may be provided this data by you directly or by the relevant institution or organisation through which you submit your application for scholarship and during the course of your scholarship.
Using your data for profiling
At times, we may also use your personal data for profiling – to help us better understand who is benefiting from our scholarships. Where appropriate and practicable, we will anonymise personal data before using it in this way.
Our legal basis for processing
Our lawful basis for this processing is our legitimate interest. The information Is required in order that we may answer your enquiries, process your application, the proper management of the Trust and managing our academic and Industry relationships. We only keep the minimum mount of data necessary and use your information only in ways we believe you would expect.
Retaining and deleting personal data
Personal information that we process for any purpose shall be kept only for as long as it is necessary for that purpose. We will retain your personal data:
- for as long as we have reasonable business needs, such as managing our relationship with you and managing our operations;
- for as long as we provide services to you and then for as long as someone could bring a claim against us; and/or
- retention periods in line with legal and regulatory requirements or guidance.
How we store and protect your data
We take appropriate technical and organisational precautions to secure your personal information and to prevent its loss, misuse or alteration.
Our records are kept in computer files on “Dropbox” and on password protected personal computers or in secure manual record-keeping systems. We believe these security measures to be adequate.
Providing your personal data to others
We sometimes use third-party suppliers for administrative and technical support services and at times they may be required to process your personal information under our instruction. In such instances, we will always make sure a suitable data processing contract is in place to secure and protect your information.
Other than this, we will never disclose your personal data to third-parties without your prior written consent.
International transfers of your data
We’re based in the UK but our document storage providers, “Dropbox” and our event management software “Eventbrite” are based in the United States. The European Commission has made an “adequacy decision” with respect to the data protection laws of the US. Transfers to the US will be protected by appropriate safeguards, namely the use of the EU-US Privacy Shield approved by the European Commission, a copy of which can be obtained from https://www.privacyshield.gov
We do not otherwise transfer your information outside of the United Kingdom.
We will review and may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are happy with any changes to our policy.
We intend to review our policy bi-annually and in the event of regulation changes.
We will notify you of significant changes by email.
Your rights in relation to the data we hold about you
By law, you have a number of rights when it comes to your personal data. Further information and advice about your rights can be obtained from the data protection regulator in your country.
The right to be informed
You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights.
The right of access
You have the right to obtain access to your information and certain other information.
The right to rectification
You are entitled to have your information corrected if it’s inaccurate or incomplete.
The right to erasure
This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
The right to restrict processing
You have right to ‘block’ or suppress further use of your information. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
The right to data portability
You have rights to obtain and reuse your personal data for your own purposes across different services. This enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
The right to object to processing
You have the right to object to certain types of processing, including processing for direct marketing.
The right to lodge a complaint
You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator.
The right to withdraw consent
If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time. This includes your right to withdraw consent to us using your personal data for marketing purposes.
We usually act on requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs of providing the information for:
– baseless or excessive/repeated requests, or
– further copies of the same information.
Alternatively, in some cases we may be entitled to refuse to act on your request.
You may exercise any of your rights in relation to your personal data by written or verbal notice to us in addition to the other methods specified in this Section. Please consider your request responsibly before submitting it. We’ll respond as soon as we can and, generally, this will be within one month from the date of receiving your request.
Getting in touch with us:
post, to 16 Nightingale Avenue, London, E4 9RG;
or by email using firstname.lastname@example.org
The relevant cookies are: _ga, _gid, _gat, AMP_TOKEN, _gac_, _ _utma, _ _utmt, _ _utmb, _ _utmc, _ _utmz, _ _utmv.
Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser. You can obtain up-to-date information about blocking and deleting cookies here https://www.howtogeek.com/241006/how-to-block-third-party-cookies-in-every-web-browser/
Third party websites
Our website includes hyperlinks to, and details of, third party websites.
We have no control over, and are not responsible for, the privacy policies and practices of third parties.