The Cultural Learning Alliance is a consortium of individuals and organisations.
By using this website, you are agreeing to all of the following terms, and to our processing of your personal data in accordance with them.
This Statement sets out the steps that the Cultural Learning Alliance has taken as part of the process to ensure continual GDPR compliance.
The EU General Data Protection Regulation (GDPR) superseded the existing Data Protection Act in the UK on 25 May 2018. GDPR was designed to protect and empower all EU citizens’ personal data and to overhaul the way that organisations approach data privacy.
The Cultural Learning Alliance will comply with the GDPR principles requiring that personal data is:
- Processed lawfully, fairly and in a transparent manner in relation to individuals
- Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes
- Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed
- Accurate and, where necessary, kept up to date
- Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed
- Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures
Personal data collection
The Cultural Learning Alliance may process the following kinds of personal information:
- Name, job title, organisation, contact details and location details if provided
- General information that you provide to us (via email, phone, postal correspondence, or in person).
- Any other information that you choose to send to us
- Information about our contractors, Strategy Group and Advisory Panel (such as name, address, email, twitter handle, telephone numbers)
- Special category information if you apply to take part in panels or apply for roles (ethnicity and health)
The Cultural Learning Alliance will not process:
- Any other special category information other than ethnicity and health.
Using personal data
Personal data submitted to us will be used for the purposes specified in this Policy.
We may use your personal data to:
- Contact you to provide our newsletter or gather more information regarding case studies or your views on arts and education policy
- Contact you via telephone, email or by postal correspondence
Data is processed for the following reasons:
- As necessary for the performance of tasks carried out in the legitimate interest, namely the support of the aims of the Cultural Learning Alliance
- To continue an on-going relationship with CLA members, partner organisations, suppliers, Strategy Group and Advisory Panel members
- In processing data under our legitimate interest, we continue to consider our privacy impact and maintain a low risk to data subjects
We will not:
- Collect any data that is not relevant to the above
- Sell or rent your information to third parties
- Share your information with third parties for marketing purposes
The Cultural Learning Alliance reserves the right to hold data related to our member list and to provide those who have opted-in with our monthly newsletter. We will keep data for as long as is needed to complete the task for which it was collected. The CLA’s relationships with members and partners are often long term, and so we expect to keep your data for as long as that relationship exists.
Personal data security
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
The Cultural Learning Alliance will store all the personal data you provide on its secure cloud based services including Mailchimp and WordPress. Our IT suppliers are all GDPR compliant and provide secure systems. Any hard copies/printed documents which may contain personal information are stored in our secure office which is only accessed by the Cultural Learning Alliance.
Your information may be accessed by staff and relevant consultants or subcontractors (i.e. the outsourcing of our newsletter preparation or website development to a consultant) or other suppliers insofar as is reasonably necessary.
In addition, we may disclose your personal information to third parties:
- To the extent that we are required to do so by law (HMRC, Charity Commission)
- In connection with any legal proceedings or prospective legal proceedings
- To any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information
Except as provided in this Policy, we will not provide your information to third parties. We may from time-to-time pass data to other organisations, known as Data Processors, to provide specific services to us. An example would be providing data to a mailing house in order to send copies of a publication you have requested. A contract is always in place with a Data Processor, and they are not allowed to do anything with your data other than that which we have requested (in this case to deliver the publications to the address you have provided).
Cross-border data transfers
Information that the Cultural Learning Alliance collects may be stored and processed in and transferred between any of the countries in the European Economic Area (EEA) in accordance with this privacy statement. The information which you provide to us may be transferred to countries outside the EEA. For example if any of our cloud servers (e.g. Mailchimp) are from time to time located in a country outside of this region. These countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.
The law requires us to tell you that you have a variety of rights about the way we process your data. These are as follows.
- You may change or stop the way in which we communicate with you, or process data about you, and if it is not required for the purpose you provided it, then we will do so
- Where our use of your data requires consent, you may withdraw this consent.
- Where we rely on our legitimate interest to process data, you may ask us to stop doing so
- If you are not satisfied with the way we have processed your data then you can complain to the Office of the Information Commissioner (https://ico.org.uk/concerns/)
You may instruct us to provide you with any personal information we hold about you. Provision of such information will be subject to:
- A written request stating the information you require
- The supply of appropriate evidence of your identity
We will provide you with this information within 30 days of receiving your request.
The accuracy of your information is important to us so do let us know any updates to your contact details as soon as you can, and we will ensure that we update our records promptly. Only the accurate and up-to-date data will be kept.
This Policy will be reviewed annually and we may update it from time-to-time by posting a new version on our website. You should check this page occasionally to ensure you are happy with any changes (a link to this document will be made available on staff email signatures). This Policy was last updated in May 2018, and last reviewed July 2021.
The website contains links to other websites that are not under the control of and are not maintained by the Cultural Learning Alliance. We are not responsible for the content or reliability of the linked websites. The Cultural Learning Alliance provides these links for your convenience only but does not endorse the material on these sites.
Each existing member of staff at the Cultural Learning Alliance (along with freelance consultants when appropriate) will be adequately trained in our GDPR procedures (as outlined in this policy). This training will also form part of the induction for any new staff members. The CLA does not legally require a Data Protection Officer, however, our Director’s will lead on GDPR and ensure that all staff members are trained and that we remain fully compliant at all times.
If you have any questions about this privacy statement or our treatment of your personal information, please write to us by email to firstname.lastname@example.org or by post to: Director, Cultural Learning Alliance, c/o Paul Hamlyn Foundation, 5-11 Leeke Street, London WC1X 9HY.
The copyright in the contents of this website is owned by the Clore Duffield Foundation (on behalf of the Cultural Learning Alliance) or its licensors. This includes text, images and videos, but is not restricted to them.
If you send us your stories or examples, you are consenting to our editing that material for use on this website or for other publicity and advocacy purposes, e.g. in a leaflet. The primary purpose of editing will be to make the material legible and fit with formatting.
If you send us your evidence, you are consenting to us posting the evidence on our website and including it in any databases of evidence which we may create and share. We will not alter the evidence documentation that you provide; however, we may alter your description of it.
We reserve the right not to publish any material that you provide. All decisions regarding publication or posting to the website are at our absolute discretion.
You agree not to send us examples, stories or other material that would infringe the intellectual property rights of any third party.
We may on occasion gather information regarding your computer whilst you are on our website. This enables us to improve our services and to provide statistical information regarding the use of our website. You won’t be identified personally; data gathered is statistical and relates only to visitors to the site and their use of it.
Although care is taken to check and test material at all stages of production, we cannot accept responsibility for any loss, disruption or damage to your data or your computer system which may occur whilst using material derived from this website.
If you do find something that you think is inappropriate, please report this to email@example.com
We have tried to ensure the accuracy of the contents and information provided in this website, as at the time of posting. However we disclaim all liability to you arising out of your use of the site.
These terms and conditions of use and your use of the services shall be governed by and construed in accordance with English law, and the English Courts shall have exclusive jurisdiction in connection with all matters relating to these terms and conditions of use.