By the end of May everyone will be fed up of hearing and reading about GDPR, but what is it and how does it affect the OSC?
The General Data Protection Regulations (GDPR) are new EU wide rules for the storage and use of personal information, held by all organisations. In reality, any group, club or business that uses personal data now has a legal responsibility to comply with the regulations. We are, of course registered with the Information Commissioners Office, under the Data Protection Act.
The OSC started to prepare for this last year, we looked at our systems, mostly how we stored and used our members details and we chose to move our data to Pitchero, who operate our web site.
This move has provided us with a safe and secure area to handle our members details. Those of you who are registered on the web site can be assured by the fact that Pitchero holds the membership details of over 4000 organisations like the OSC, millions of members details are secured on their servers.
You will start to get messages about "opting in" to receive our newsletters and we hope that you do take the time to do just that, "opting in" permits us to send you information and news either in the post or by email. You can "opt out" at anytime of course.
Formal statements like "We will not sell your details" will start to appear on our policy page on the web site. These are still in the process of being produced, simply because we need to get them right.
Internally we have conducted our assessment of the systems we use and have used in the past and we are confident that everything we do internally is compliant.
In reality, the regulations have made us (and everyone else) look at how we do things and make changes to make your details more secure. We will not keep your details for longer than we feel we need to. We do not hold details of memberships over a year old anyway, so that part is fairly easy.
We do not hold ANY card or Bank details used for payments, cheques are not copied and we destroy paper records once they are entered onto the system.
You can ask us to send you all of the details we hold for you and we will respond within a month. If you have any questions regarding GDPR and the OSC, please email me:
Melvyn Utley Data Controller HCOSC at: firstname.lastname@example.org
Updated 13:37 - 3 Jun 2018 by Kathryn Townsley