The Endorsement and Quality Standards Board for Community Development Learning (ESB) is registered in England as a company limited by guarantee (company number 03505553).
ESB is committed to protecting and respecting your rights. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, is used.
If you use our services (join an event or comission us) we may collect basic personal data about you, including:
• Work address, phone number and email
• Job title, department and company
• Images (with consent)
• Video (with consent)
• Audio (with consent)
• Email correspondence
On occasions or following a commission we may also need to collect and store special categories data that includes sensitive personal information about your health or medical conditions. We will collect this information from you to ensure we meet any statutory obligations and/or meet our duty of care to you or to fill a contractual agreement following a commission.
Why we collect data
For a commission or contract we have a legitimate right to process your information in order to fulfil a contractual agreement, such as providing event attendance or research. Without this information, it will not be possible to provide our services. We will not collect personal data that we do not need and will be explicit in how the data will be used and processed.
Change of purpose
We will only use your personal data for the purposes for which it is collected, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you to explain the legal basis which allows us to do so or request your consent.
Who processes my data?
All data we hold about you will be processed by our staff and approved third party contractors (sub-processors). Third party processors are required to take appropriate security measures to protect your personal data in line with our policies and act only under our instruction. They do not have permission to use your data for their own purpose without your prior consent.
Our website holds a minimum amount of personal data that is designed to permit authentication
We will only retain your personal information for as long as necessary to fulfil the purpose/s it was collected for, including satisfying any legal, accounting, or reporting requirements.
Personal data is disposed of by ESB:
• When an individual verbally exercises their right to erasure and that request is not refused by ESB.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
In the physical world
Our paper records are minimal but can include printed contracts, printed event information and other small sources of data used in day-to-day office activity. Personal data held on paper is digitised and the paper is destroyed as soon as possible.
We use standard cloud servers for our technology, which can be in data centres in other locations apart from the UK. This may involve transferring your data outside the European Economic Area (EEA). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it.
Your rights of access, correction, erasure and restriction
Your duty to inform us of changes
It is important that the personal information we hold about you is accurate and up-to-date. Please keep us informed if your personal information changes during your working relationship with us.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
• Request access to your personal information (commonly known as a 'data subject access request'). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected. You may also request for supplementary information to be added to your information where relevant and appropriate.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• Request the transfer of your personal information to another party.
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us. We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
Right to withdraw consent
In circumstances where you may have provided your consent to the collection and use of your personal information for a specific purpose, you have the right to withdraw your consent for that processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose/s you originally agreed to, unless we have a legitimate basis for doing so in law.
Cookies on this website
Information about the cookies that may be set by this website. These cookies will not be set all the time, some of the cookies listed will only be set if you look at specific pages or carry out specific actions. This page also provides information that can help you block or delete cookies set by this website.
Please be aware that restricting cookies may impact on the functionality of this website.
This website uses services provided by other companies (e.g. Google, Vimeo) who also set cookies on this website on our behalf in order to deliver the services that they are providing.
If you would like more information about the cookies used by these suppliers, as well as information on how to opt-out, please continue reading.
We would like to draw your attention to the fact that this website now carries embedded ‘share’ buttons to enable users of the site to easily share articles with their friends through a number of popular social networks.
Examples of Social networks that provide sharing services are:
Local Shared Objects (Flash Cookies)
This website may use the Adobe Flash Player to deliver its video content using services or software.
Software and services we use include:
JW Player www.longtailvideo.com
To improve user experience, Local Shared Objects - or Flash Cookies as they are commonly known - are employed to provide features such as auto-resume and for saving your preferences. Flash Cookies are stored on a user's terminal much the same as cookies are, however it is not possible to manage them at browser level in the same way.