New Wine is fully committed to compliance with the requirements of the General Data Protection Regulation and will therefore follow procedures which aim to ensure that all employees and volunteers or others serving New Wine who need to have access (see Data Sharing below) to any personal data held by or on behalf of New Wine are fully aware of and abide by their duties under the General Data Protection Regulation.
We rely on Legitimate Interest as the lawful basis for processing personal data. The data we process is freely provided by the data subject at the point of account registration (with the exception of family/group bookings, see below). We request the minimum amount of data to carry out the processes requested by the data subject, and do not share this data outside of our organisation (exceptions outlined under Data Sharing below). We also process data for the purpose of direct marketing of events and products that we believe are of interest and benefit to the individual, and always provide a clear and simple option to unsubscribe from such communications.
New Wine needs to collect and use information about employees, delegates, volunteers and referees (for volunteer applications) in order to operate and carry out its functions. New Wine may also be required by law to collect and use information. New Wine regards the lawful and appropriate treatment of personal information vital to successful operations and in maintaining confidence between New Wine and those with whom it carries out business.
On visiting our website, New Wine receives and records information from your browser, including your IP address and cookies (see Cookies below). We also use Google Analytics to monitor how visitors use our website. These forms of data collection are to enable us to make our user experience useful and relevant.
New Wine may also collect and store information about your financial transactions with us. This is needed to keep a record of income, for tax purposes and to process payments and Gift Aid. We do not have access to your credit card details if you have paid online and we do not retain your credit card details provided by any other means once your payment has been cleared (e.g., for donations to our event offerings). All online payments are processed via a GDPR-compliant third party (Sage).
New Wine allows 13-18 year-olds to create personal accounts for the purpose of Team (volunteer) applications. Personal details relating to Team applications for United will only be shared with authorised Team Leaders.
The information we ask you to provide when creating a New Wine account will be used to create your user profile, which can be accessed and used by New Wine to offer administrative support; in relation to any further action you may take relating to your account (e.g., booking for an event); and to contact you about products and services that may be of interest (we always provide an opportunity to opt out of receiving further communications at the time you are contacted).
If you have a Facebook account linked to your email address, we may let you know about New Wine products and services that may be of interest to you via Facebook.
New Wine will, through management and use of appropriate controls, monitoring and review:
- Use personal data in the most efficient and effective way to deliver its services.
- Strive to collect and process only the data or information which is needed.
- Use personal data for such purposes as are described at the point of collection, or for purposes which are legally permitted.
- Strive to ensure information is accurate.
- Not keep information for longer than is necessary.
- Securely destroy data which is no longer needed.
- Take appropriate technical and organisational security measures to safeguard information (including unauthorised or unlawful processing and accidental loss or damage of data).
- Ensure that information is not transferred abroad without suitable safeguards.
- Ensure that there is general information made available to the public of their rights to access information.
- Ensure that the rights of people about whom information is held can be fully exercised under the General Data Protection Regulation. These rights include:
- The right to be informed
• The right of access to personal information
• The right to request rectification
• The right to request erasure
• The right to restrict processing in certain circumstances
• The right to data portability
• The right to object to processing
Account holders can log in to access their New Wine account information at any time and view or change personal details and communication preferences. New Wine must act upon any request to remove personal data without undue delay and at least within one month of receipt. However, the right to remove your personal data is not absolute and only applies in certain circumstances. It does not apply if processing is necessary for one of the following reasons:
- To exercise the right of freedom of expression and information.
- To comply with a legal obligation.
- For the performance of a task carried out in the public interest or in the exercise of official authority.
- For archiving purposes in the public interest, scientific research, historical research or statistical purposes where erasure is likely to render impossible or seriously impair the achievement of that processing
- For the establishment, exercise or defence of legal claims.
Access to your online data is limited to New Wine employees and named employees of our web server and database team (Freely Give) for the purpose of system support and management. This access is restricted by a data protection contract which prohibits data sharing (see Security below).
We securely store your first name, last name and email address with a GDPR-compliant online communications platform (Mailchimp) to manage and distribute emails. We use tracking to monitor the performance of our emails and their content (e.g., to monitor the open rate of emails or the popularity of specific links). You are given the opportunity to manage your communication preferences or unsubscribe from all emails each time you receive an email from us.
We will not disclose your personal details outside of our organisation unless to comply with a legal obligation or to deliver services that you have signed up to, which are limited to the following:
- Sharing your name and email address with our New Wine Online digital platform provider, uscreen, with whom we have a data protection contract in place preventing the sharing or use of your data for any purposes other than that outlined above.
- Sharing your name and address with our external mailing and sorting house to distribute postal mailings and to maintain up-to-date postal records. We have a data protection contract in place preventing the sharing or use of your data for any purposes other than that outlined above.
- Personal details relating to Team (volunteer) applications and references (name, address, telephone number, date of birth and Disclosure and Barring Service information) will be shared with New Wine-appointed Team Leaders, who are sent a data protection acknowledgement and are required to undergo GDPR training (annually). Referees (nominated by the applicant) are only sent the name and Team applied for. We do not store any data for referees.
Your New Wine account information is password-protected. We use physical, electronic and procedural safeguards to protect your personal information.
New Wine use HTTPS security and SSL-encryption to protect data transmissions (for purposes outlined in Data Sharing above). Please note that this is not a guarantee that such information may not be accessed, disclosed, altered or destroyed by breach of firewalls and secure server software. If New Wine learns of a security systems breach, we will post a notice on our website and will attempt to notify you via email so that you can take appropriate protective steps.
It is the responsibility of the account holder to ensure the security of their personal account log-in details.
New Wine reserves the right to photograph or film volunteers or delegates within public areas at New Wine conferences and events. Only official New Wine photographers will be authorised and are recognisable by a New Wine ‘media pass’. Only distance photography will be taken during ministry times, and we will not photograph faces.
For children’s venues at United (Gems up to Club One), there is a section on the children’s registration form where parents can indicate whether or not their children can be photographed/filmed. The photographer will liaise with the team leader to schedule an exact time and date for photography within each venue, so that children can be moved to the dedicated area at the appropriate time. Consent will be gained from parents for photographing/filming children outside of children’s venues.
All photographs taken for New Wine are the property of New Wine and may be used for illustrative purposes, such as for the website, social media or brochures, for educational purposes, such as providing a visual explanation of the different activities that run during the conferences, or as a resource for future marketing and promotion of New Wine events. It is the responsibility of New Wine to make sure that all staff, delegates and volunteers are aware that there may be photography and filming in the public spaces provided. This should be made clear through public notices, signs and/or visual projection.
If you have any concerns or queries, please don’t hesitate to contact us at email@example.com
How we collect your data
How we use and process your data
Your first name, last name and email address are processed:
- by MailChimp to enable communications solely regarding New Wine Online
In addition, your payment details are processed by Stripe for the purpose of managing payment to use the platform.
If you would like to request access to the data we hold on you via New Wine Online or request erasure of your data, please contact: firstname.lastname@example.org
Last updated: 15 March 2021