Email: admin@afghan-edinburgh.or.uk
Address: 16/8 Blacket Avenue
Edinburgh, EH9 1RS

• Our lawful bases for collecting or using personal information to provide our charitable activities, programmes and support, including third-party referrals, are:
• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
  Our legitimate interests include providing and managing our charitable activities, supporting beneficiaries, members and volunteers, organising activities safely, maintaining accurate records, communicating with participants, and ensuring effective governance of the SCIO. Collecting and using personal information is necessary so that we can deliver our charitable activities and support, manage participation, protect the wellbeing of children and other beneficiaries, support volunteers, and operate the organisation effectively. We only collect information that is relevant and necessary for these purposes.
  For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. Our lawful bases for collecting or using personal information to receive donations or funding and organise fundraising activities are:
• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
• Our legitimate interests are to manage and administer fundraising activities, maintain accurate donation records, communicate with supporters, acknowledge donations, and support the financial sustainability of the SCIO.
  For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. Our lawful bases for collecting or using personal information for service updates or marketing purposes are:
• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
• Our legitimate interests are to keep our members, beneficiaries, volunteers and supporters informed about relevant activities, services and organisational updates, where appropriate.
  For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. Our lawful bases for collecting or using personal information to comply with legal requirements are:
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  Our lawful bases for collecting or using personal information for recruitment purposes are:
• Legal obligation – we may collect or use your information where required to comply with legal requirements, including safeguarding and safer recruitment requirements. This may include processing information relating to PVG scheme membership or other disclosure checks where required for a particular role. Where we process criminal offence data as part of PVG or disclosure checks, we do so in accordance with Article 10 UK GDPR and the relevant condition(s) in Schedule 1 of the Data Protection Act 2018. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
• Our legitimate interests are to recruit suitable people to support the work of the SCIO, assess applicants fairly, manage recruitment processes, and ensure that we select appropriate trustees, staff and volunteers. Processing personal information is necessary to administer recruitment, communicate with applicants, verify suitability where required, and support the effective operation of the organisation. We only collect information that is relevant and necessary for recruitment purposes and we protect applicants’ personal information.
  For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
• Our legitimate interests are to respond to enquiries, manage complaints, investigate concerns, resolve issues, and maintain effective communication with beneficiaries, volunteers, members, supporters and other stakeholders. Processing personal information is necessary to allow us to address concerns, improve our services, maintain accurate records, and operate the SCIO effectively. We only use information that is relevant and necessary for handling queries, complaints or claims, and we take steps to protect individuals’ privacy.
  For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.
  

We keep personal information only for as long as it is needed for the purpose it was collected, to meet our legal and regulatory obligations, and to protect our legitimate interests. Different types of information are kept for different periods depending on the nature of the information, the purpose for which it was collected, and any legal, regulatory or safeguarding requirements. Our Record Retention Policy sets out the retention periods and criteria we use to determine how long different types of information are kept. For more information on how long we store your personal information or the criteria we use to determine this, please refer to our Record Retention Policy or contact us using the details provided above.