125th Anniversary Privacy Notice

Clarion Housing Group Limited (we, us and our) respects your privacy and is committed to protecting your personal data.

This privacy notice applies to all of our residents and other individuals (you and your) who participate in our 125th anniversary campaign activities, including grant funding applications, the film school and the submission of personal stories relating to your involvement with us through this website and describes how we collect and use personal information about you during and after your relationship with us, in accordance with the UK General Data Protection Regulation (UK GDPR).

It is important that you read this privacy notice together with our Group Privacy Notice which contains more detailed information about our data processing activities.

Important information and who we are

Clarion Housing Group Limited is the data controller and responsible for your personal data.

We have appointed a data protection officer (DPO) If you have any questions about this privacy notice or our data protection practices, please contact the DPO using the following details:

Email: dataprotection@clarionhg.com
Post: Data Protection Officer, Clarion Housing Group, 5th Floor, Greater London House, Hampstead Road, London, NW1 7QX

The data we collect about you

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you as follows:

Identity Data: Including first name, maiden name, last name, marital status, title, and gender.
Contact Data: Including address, telephone number and email address.
Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
Usage Data: Includes information about how you interact with and use our website.
Other Data: Includes any other information that you decide to include in any stories that you provide to us on the website as part of our 125th anniversary campaign.

We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals’ Usage Data to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website. We do not intend to collect, store or use special categories of personal data (such as information about your race or ethnicity, religious beliefs, sexual orientation or health) or information about your criminal convictions and offences through this website. However, if you provide this information to us as part of your story submissions, we will process this information in accordance with our Group Privacy Notice. We do not knowingly collect the personal data of children and we actively discourage children from submitting their personal data to us through the website.

How is your personal information collected?

We collect your personal information directly from you when you submit your information to the website.

You may also submit your details to the following third parties through our website:

Iconic Steps Film Academy C.I.C (acting as a data controller) – for the purpose of participating in the film school;
Fluent Technology Limited (acting as a data processor) – for the purpose of applying for grant funding activities as part of our 125th anniversary campaign.

How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Performance of a contract: Where we need to perform the contract, we are about to enter into or have entered into with you.
Legitimate interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Legitimate interests means the interest of our business in conducting and managing our business to enable us to give you the best service and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Legal obligation: Where we need to comply with a legal obligation.
Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example where we decide to publish the stories you have submitted to us on the website.

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so.

Drag table left and right to view more

Purpose / Activity	Type of data	Lawful basis for processing
To assess and manage grant funding applications	a) Identity b) Contact	a) Performance of a contract with you (to assess and process your grant application).
To review and consider personal stories for publication on our website, social media or other campaign materials and to contact you in relation to those stories.	a) Identity b) Contact c) Other d) Special categories of personal data (if provided)	a) Necessary for our legitimate interests (to allow you to contribute to our campaign activities). b) The condition for processing any special categories of personal data you submit to us as part of your stories is explicit consent under Article 9(2)(a) UK GDPR.
To manage our relationship with you which will include: a) notifying you about changes to this privacy notice; b) contacting you about our campaign activities; c) dealing with your requests, complaints and queries.	a) Identity b) Contact	a) Necessary to comply with a legal obligation. b) Necessary for our legitimate interests (to keep our records updated and to manage our relationship with you).
To enable you to partake in a prize draw, competition or complete a survey.	a) Identity b) Contact c) Usage	a) Performance of a contract with you (to facilitate prize draws, competitions and surveys). b) Necessary for our legitimate interests (to study how website visitors interact with our website, and to facilitate our 125th anniversary campaign)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).	a) Identity b) Contact c) Technical	a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security and to prevent fraud). b) Necessary to comply with a legal obligation.
To deliver relevant website content to you and measure or understand the effectiveness of our 125th anniversary campaign.	a) Identity b) Contact c) Usage d) Technical	a) Necessary for our legitimate interests (to study how website visitors interact with our website and to inform our 125th anniversary campaign strategy).

How we share your personal data

We may share your personal data within our group and with the parties set out below:

Service providers acting as processors as set out in our website privacy policy who provide IT and system administration services;
Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

International transfers

We may transfer, store, and process your personal data outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data including the right to receive a copy of the personal data we hold about you and the right to make a complaint at any time to the Information Commissioner’s Office, the UK regulator for data protection issues (www.ico.org.uk). More detail can be found in our Group Privacy Notice.

Further details

If you are looking for more information on how we process your personal data including on data security and data retention please see our Group Privacy Notice.