OSTC Walks to the Border Privacy Notice

We are committed to being transparent about how we collect and use personal data and how we meet our data protection obligations.

Please read the following carefully prior to submitting the form in order to understand how we will safeguard your personal information and how that information may be collected, used, or shared.

OSTC Group is the controller for the personal information we process, unless otherwise stated.

There are many ways you can contact us, including by phone, email, and post.

Our postal address:

Bromley (Head Office)
21-25 North Street
Bromley
Kent
BR1 1SD

T: +44 203 326 9050

We have appointed a data protection officer (DPO) to oversee compliance of data protection laws. Our DPO can be contacted at gdpr@OSTC.com.

How We Use Your Information

We will only use your information in order to administer the OSTC Walks To The Border fundraising event. Data will be stored in OSTC Group IT systems (including email).

What information do we collect?

We will only collect the following types of information from you:

• Name;
• Contact details (phone, email, address)
• Images (if you supply us with photos or videos of you doing the walk)

Lawful basis for processing your data:

Legitimate Interest: Where we have a legitimate interest (which you may object to at any time) to process Data, we will use your Data on the basis that we have legitimate interest to do so which is not overridden by your rights and freedoms, which may include the following type of processing

• help us identify you so we know who we are talking to;
• maintaining a record of donations raised

Who has access to your data?

We may disclose your personal information to any of our subsidiaries, affiliates or their successors or assigns, contractors, service providers, or other third parties that we use to support the OSTC Walks To The Border fundraising event. Any entity with whom your personal information is disclosed is authorized to use that data solely as needed in order provide support for OSTC Walks To The Border fundraising event. We do not sell your personal information.

We may also disclose your personal information to comply with any applicable law, regulation or government request or to protect our rights or the rights of our customers, users, partners, or others.

How does OSTC Group protect your data?

We take the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.

Where we have need to share your data with third party organisations, we ensure it is with your consent and transferred via secure transmission methods.

For how long does OSTC Group keep data?

We will only retain your personal data for as long as necessary to fulfil the OSTC Walks To The Border fundraising event.

Your rights under the GDPR:

Under certain circumstances, by law you have the right to:

• Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• Request the transfer of your personal information to another party. This only applies to information you have given us.

If you want to review, verify, correct, request erasure or object to the processing of your personal information; request that we transfer a copy of your personal information to another party; or if you have any general queries about how we handle your personal data, please email: gdpr@OSTC.com.

Data protection officer

We have appointed a data protection officer (DPO) to oversee compliance of data protection laws. Our DPO can be contacted at gdpr@OSTC.com.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues at the following address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF