Your privacy is important to us. We comply with all protection which the Data Protection Act 2018 (GDPR) sets out. It is not Park Ecovillage Trust’s intention to infringe on your rights.
What PET is
Park Ecovillage Trust is a Company Limited by Guarantee, registered in Scotland as Company No: SC354855 and a Charity registered in Scotland, No: SC041279; Registered Office: 45 The Park, Findhorn, Forres IV36 3TZ, United Kindom.
Our website address is: https://parkecovillagetrust.co.uk.
Park Ecovillage Trust is registered with the Information Commissioner’s Office under: ZA205692.
We take a risk-based approach to data protection, ensuring appropriate policies and procedures are in place digitally and otherwise to deal with the transparency, accountability and individuals’ rights provisions, and have a workplace culture of data privacy and security.
What personal data we collect and why we collect it
In general PET collects personal data in order to (a) administer the renting out & physical management of our affordable Housing units, and (b) to make our Caring Community Circle activities function. While we collect your information, we do not process it outside our own internal, operational and legitimate interest ie. no information is shared with/sold to external parties, and the minimum necessary amount is kept in a safe place.
In summary, both non-digitally and digitally, we collect personal data such as name, email address, transaction data and information which you give consent to by (i) initiating contact with us and/or (ii) by giving us your specific consent. However personal data is not just created by the content of your interactions with PET.
Digitally, personal data is also generated from technical processes such as contact-, membership-, volunteering-, project-forms, donation, legacy and gift aid forms (Gravity Forms), comments (WordPress), transactions, subscription forms (EmailSubscribers), and the only third party embeds — Google Analytics and an Anti-Spam plugin.
For more details about these individual web-plugins and the embed click here.
When you leave comments on the website we collect the data shown in the comments form, and also your IP address and browser user agent string to help spam detection.
We keep (website&other) Contact Form submissions for contact service purposes, but do not use the information submitted through them for marketing purposes at all.
If you leave a website comment, you may opt-in to saving your name, email address and website in WordPress Cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. Also the personal data generated from technical processes are held in cookies. Cookies last for one year.
Embedded content from other websites
The website uses the Google Analytics Package. Google therefore have obligations to conform to GDPR. We only study the results and don’t crunch any numbers.
WordPress does not collect any analytics data, they say by default. And we have not installed the WordPress plugin that provides analytics services.
Who we share your data with
We do not share site data.
When you pay for a (website&other) Carbon Offset, your anonymous Offset Choice information is directed away from our site to the PayPal site where you do input your personal data into their secure system. Obviously Paypal are obliged to conform to GDPR. Paypal’s generic report to PET upon successful payment, includes your name and email address. It is this information that we automatically use to generate your Carbon Offset confirmation reply. This information remains internal to & secure within our administration.
Only the Carbon Offset date, emissions, project and amount are passed on to the Projects Coordinator Carbon Footprint Ltd.
Just as Google does, we use Google Analytics data to receive the Google Analytics measurement service. Identifiers such as cookies and app instance IDs are used to measure user interactions with our site, while IP addresses are used to provide and protect the security of Google’s service, and to give us a sense of where in the world our users come from.
Our anti-spam software detects language as we only accept comments in English. To do this it is using franc. It sends comments to this service via HTTPS, though data about the commentator (like IP or email address) is not sent.
WordPress does not share any personal data with anyone, they say by default.
How long we retain your data
If you leave a website comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in the moderation queue.
(Website&other) affordable Housing, Caring Community, and Carbon Offset information is also kept indefinitely [re. Carbon Offsets anonymously (except for date, emissions, project and amount); and re. Housing and Caring Community under a pseudonym] at least to fulfill PETs legal information record obligations, and for the year on year comparison of Findhorn Ecovillage Community results.
(Website&other) contact-, membership-, volunteering-, project-forms are kept until you stop being a PETmember/volunteer/project/tenant/CCCservice user, and request its removal.
(Website&other) donation, legacy and gift aid form data is kept within our administration at least until the legally required time to keep financial transaction records is passed.
What rights you have over your data
If you have have left website info/comments, you can request to receive an exported file of the personal data we hold about your email address, including any data you have provided to us. You can also request that we erase any personal data we hold about you both on the website and re. Housing and Caring Community Circle. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
We do not. Park Ecovillage Trust uses the information you provide only for the purpose it was originally required/offered, and only in the respective internal department. Your website comments are checked through an automated spam detection service (see under “sharing,” above).
Legal Disclaimer / Disclosure
We are not lawyers. Due to the dynamic nature of information gathering and of websites, no single GDPsystem, website-plugin or web-platform can offer 100% legal compliance. We intend to and do our utmost to protect your personal data by being in compliance with all applicable laws for our jurisdiction and use cases — we only want you to have an informative visit and come back again!