Book Forres Osprey Bus Online



FORRES OSPREY BUS SCIO – PRIVACY NOTICE

  1. What is this Notice About and Why Should You Read It?

We are committed to safeguarding the privacy of persons for whom we process personal data. This privacy notice explains how we will treat personal data processed by us, following data protection legislation. 

  1. What Types of Personal Data Do We Process and What are the Purposes of the Processing?

We process the following types and categories of personal data: 

  • Information relating to any membership application you make, such as name, address, telephone number, age, email address, and/or any other personal data you voluntarily provide us with, whether through our website, in person or otherwise.

  • Any information you voluntarily elect to send to us through our website, emails, the post, and/or telephone calls.

  • Personal data obtained through using Cookies on our website – please view our Cookie Notice for more information.

  • Personal data enabling us to administer our website and ensure that our website is presented most effectively for you, such as IP address, geographical location, browser types and version, operating system, referral source, length of visit, page views and website navigation paths.

Occasionally, we need to process special category data about people. We will only process special category personal data when allowed to by law, including where you have given us consent to do so, to protect a person’s vital interests or if the data has already manifestly been made public by you. We may also process this type of data to establish, exercise or defend a legal claim. Other exceptions exist in law, and we reserve the right to rely on these exceptions, if and when required, but do not envisage such processing of special category personal data within our Charity. 

We will only process personal data which is adequate, relevant and limited to what is necessary for the processing purposes.

  1. Where Do We Obtain Your Personal Data From?

  • Data collected from you directly.

The majority of the personal data we process is obtained from you directly.

  • Data which may be obtained from others.

We do not routinely receive or process personal data about you from any other organisation. If we do process such personal data, we shall do so following the law.

Please note that if you are disclosing personal data regarding another person to us, you must first obtain that person’s consent for both the disclosure and the processing by us of that personal data, unless another lawful basis exists for such a disclosure, such as a legal obligation. You are responsible for ensuring you are authorised to disclose any such data to us.

  1. What Lawful Bases Do We Have For Processing Your Personal Data?

We process your personal data on a number of lawful bases, namely: 

  • The performance of contract, or to enter into pre-contractual negotiations;

  • For us to comply with a legal obligation imposed upon us;

  • For us to protect your vital interests or those of another person

  • In our legitimate interests, namely the sending of electronic and paper-based communications to other businesses

  • With your consent. Where the lawful basis for our processing of your personal data is consent, you have the right to withdraw your consent at any time.

  1. What Rights Do You Have?

You have certain rights under data protection legislation, which you can generally exercise with respect of the data which we process about you by contacting us.

Your rights are summarised below: 

  • right of access – you can request a copy of the information that we hold about you

  • right to rectification – you can ask us to correct any personal data we hold about you if you think it is inaccurate or incomplete. Please note that you are responsible for letting us know if your personal data held by us needs to be corrected or updated.

  • right to be forgotten – in certain circumstances you can ask us to delete the personal data which we hold about you

  • right to restriction of processing – in certain circumstances you have a right to restrict us from processing your personal data

  • right of data portability – you can ask us to transfer the personal data that we hold about you to other organisations, in certain circumstances

  • right to object – you have the right to object to us processing your personal data in certain circumstances

  • right to object to us making a decision about you based solely on automated processing, including profiling in certain circumstances

  1. Who Do We Share Your Personal Data With and Why?

We may disclose your personal data to insurers, professional advisors, agents, suppliers or subcontractors insofar as reasonably necessary, and following data protection legislation.

We may also disclose your personal data: 

  • with your consent

  • to the extent that we are required to do so by law

  • to protect the rights, property and safety of us, our customers, users of our websites and other persons

  • in connection with any ongoing or prospective legal proceedings

  • to the purchaser (or prospective purchaser) of any business or asset that we are (or are contemplating) selling

  • to another organisation if we enter into a joint venture or merge with another organisation

If we wish or need to share your special category persona data with another organisation, we will only do so if we have obtained your consent or are required or allowed to do so by law.

  1. Transferring Your Data Outside of the European Economic Area/The UK

Where we need to transfer and/or share personal data to countries and/or organisations outside of the European Economic Area, we only do so in accordance with the General Data Protection Regulation (‘GDPR’).

In the event of a no-deal Brexit, we will only transfer and/or share personal data to countries and/or organisations outside of the United Kingdom where authorised to do so by law.

  1. How Long Do We Process Your Personal Data For?

We will only process your personal data for the purpose or purposes stated, and this data shall not be kept for longer than is lawful.

  1. Security of Personal Data

We will take reasonable technical and organisational measures and precautions so as to prevent the loss, misuse or alteration of your personal data.

We will store all personal data we process in paper records, on our servers and/or in the Cloud.

Please note that the transmission of any type of information over the internet is inherently insecure. We cannot guarantee the security of data sent over the internet.

  1. Are We Allowed to Change this Notice?

Occasionally we may need to amend our Privacy Notice, which we will do by publishing a new version on our website. Please check this page occasionally so as to ensure that you are happy with any changes which we have made to the Notice.

  1. What Should You Do If You Have Any Complaints or Want to Find out More?

We continuously seek to ensure that we adhere to the general principles of data protection legislation, including that your personal data will be processed lawfully, fairly, in a transparent manner, subject to the purpose limitation, is minimised, is accurate, is not stored for longer than is necessary for the purposes and is processed with integrity and confidentially, as appropriate.

If you wish to exercise any of your rights as a data subject, wish to receive any more information or wish to make a complaint, contact the Chair of the Board of Trustees.

We will always endeavour to resolve any queries you may have, but please note that you also have the right to complain directly to the Information Commissioner’s Office and seek other legal remedies.

  1. How Can You Contact Us?

We are Forres Osprey Bus SCIO, registered charity in Scotland under registration number SC0049981. Our registered address is at FACT, Town Hall, High Street, Forres, Moray IV36 1PB . Our website address is https://forresospreybus.co.uk.

You can contact: 


Website by Digital Routes Ltd © Forres Osprey Bus | Registered SCIO in Scotland No: SCIO, SC049981