The Public Service Transformation Academy Ltd (“PSTA”) is a not-for-dividend social enterprise established to develop the capability of public service organisations to realise the outcomes that communities and citizens need.
This statement explains how the PSTA (“we” and “our”) handles and uses the personal data we collect about our alumni and our past, current and future participants in programmes or events that we organise (“you” and “your”).
We are a data controller in respect of the personal data that it holds. We are registered with the Information Commissioner’s Office.
The data that we hold helps us to:
- Identify the development needs of public service organisations
- Reach people in organisations that have development needs we can help meet
- Deliver the services we provide
- Keep in touch with alumni
We are committed to protecting your personal information and being transparent about what information we hold. The following statement sets out how we specifically use your personal data.
What type of information do we hold?
To inform people with responsibilities for transformational change in public service organisations of the development opportunities we offer, we collect the following information:
- Job title and service area
- Organisation name and address
- Work e-mail and telephone number
- Best telephone number to reach you for work purposes
- Information about your usage of our website.
A significant proportion of the information we hold about you is that which you provide to us (for example, you may give us information by filling in forms on the our website, or by corresponding with us by telephone, email or otherwise). We may also hold:
- details of your interactions with us, for example correspondence or attendance at events
- personal data provided by you to us for a specific purpose (for example dietary and access preferences for event management purposes)
- your communication preferences, to help us provide tailored and relevant communications.
We may use publicly available information – such as through internet searches – to obtain and maintain the accuracy of the data listed above.
How do we use the information?
Personal information which you supply to use may be used in a number of ways, for example:
- Inviting you to events, workshops and webinars
- Informing you of opportunities to join our development programmes and academies
- Inviting you to input into the research we conduct into transformation in public services.
We may share your information with organisations where it is necessary to administer an event or programme (for example, hotels and transport facilities). We will only do so where we are satisfied that the third party has appropriate safeguards in place in relation to that data and will comply with the data protection legislation. We will impose contractual requirements on those third parties where we are required to do so by law.
The legal basis for processing your personal data for the purposes set out above is that it is necessary for the pursuit of our legitimate interests.
We always handle your personal data securely and minimise its use, and we do not consider that our use of your personal information for th purposes set out above gives rise to any prejudice to your rights and interests that overrides our legitimate interests. In addition, there is no statutory or contractual requirement for you to provide us with any personal data.
At times, we may also process data on the following legal bases:
- necessary for a contract or legal obligation
- necessary for the performance of public tasks and core functions
- with your consent.
When you attend one of our events, we will need your:
- Job title
- Best e-mail or telephone number to contact you for work-related purposes
- in some cases, payment information.
We will collect this information when you enrol to attend an event. Our use and storage of personal information is based on our legitimate interests, and we may use the data to inform you of further development opportunities relevant to you and colleagues. If at any time you do not wish to hear from us, please contact us using the details set out below (see “Contact details”). You can also click the unsubscribe link in the footer of any e-mail you receive from us.
We may shall this information with organisations where it is necessary to administer the event (for example, hotels and transport facilities).
If you are a speaker at one of our events we will promote your participation via platforms such as Twitter, LinkedIn and by marketing emails. External platforms may continue to store and use personal information after the event has ended.
When you subscribe to emails from us, we will need your:
- email address.
We will collect this information when you subscribe to our mailing lists. By subscribing to our mailing lists you will be automatically subscribed to receive email updates. Our use and storage of your personal information for email marketing is based on legitimate interest. However, you can unsubscribe or change your email marketing preferences at any time, by clicking ‘unsubscribe’ or ‘manage preferences’ on any of our emails.
If you unsubscribe from our emails or withdraw your consent for us to contact you we will store your information for a period of two years to ensure that you no longer receive emails from us.
Our website places cookies (text files) on your computer. The cookies contain an ID number which is used to uniquely identify your browser and track each site you visit that has Google Analytics enabled.
We use the information provided by cookies to determine the number of people visiting our site. It also helps us to better understand how people find and use our website. With this information we can continually improve our website and service.
Our cookies [are operated by Google Analytics] store the following data:
- time of visit, pages visited, and time spent on each page of the website
- interactions with site-specific widgets
- referring site details (such as the URL a user came through to arrive at the website)
- type of web browser
- type of operating system (OS)
- network location and IP address
- document downloads
- clicks on links leading to external websites
- errors when users fill out forms
- clicks on videos
- ‘scroll depth’ (how far you scroll up or down on a page).
If you already have Google Analytics cookies, they will be updated with the latest information about your visit to our website. We cannot access these cookies and are not the data controller for information held by Google Analytics.
Your consent is generally required for cookies to be placed on your computer and for the use and storage of personal information relating to you provided by the cookies. You may withdraw your consent at any time by updating your cookie settings. Where consent is not needed for cookies to be placed on your computer (for example, where a cookie is needed for the operation of our website or for the provision of a service to you), the use and storage of any personal information provided by the cookies will be based on legitimate interests. The legitimate interests we are pursuing are the operation of our website and promotion of our business.
We record data using a software application which stores data using Amazon Web Services (AWS) in the United States. Our software provider has agreed a Data Processing Addendum with AWS that commits them to the Model Contract Clauses, defined by the European Commission. This ensures safe transfer of data to AWS in accordance with EU data protection laws. (Further information on Model Contract Clauses can be found in the UK Information Commissioner’s Office (ICO) guide.)
If we process your personal data, you have a number of rights. You may request a copy of the personal data we hold about you (and request that that data be provided in a portable format) and you may object to our processing of it (including by way of direct marketing) or ask us to rectify it, restrict the way in which we process it or erase it from our records.
Where we use or store personal information relating to you, you have the following rights:
- the right to be informed personal information relating to you is being used or stored (which is what this privacy notice is for)
- the right to access personal information relating to you which we use or hold
- the right to object to direct marketing (either by using the unsubscribe button or clicking here)
- the right to object to processing carried out on the basis of legitimate interests
- the right to erasure of information relating to you that we use or hold (only in some circumstances)
- the right of data portability
- the right to have your data rectified if its inaccurate
- the right to have your data restricted or blocked from processing.
Please be aware that these rights are not always absolute and there may be some situations in which you cannot exercise them or they are not relevant. We will retain your data for three years from last contact, or until you request us to do otherwise.
If you have any cause for concern about our handling of personal information, please contact us using the details below.
If we are unable to resolve your concerns about our handling of personal information, you have the right to complain to the Information Commissioner’s Office.
Please read this notice carefully and contact us if you have any queries by emailing us at: firstname.lastname@example.org
Or by writing to:
Data Protection Officer
Public Service Transformation Academy
27-29 South Lambeth Road
London SW8 1SZ
+44 (0)203 771 2608
This privacy notice may change from time to time so we recommend that you review it periodically. This version of the privacy notice was last updated on 17th May 2018.