Privacy Statement & Cookies

I, Chris Flanagan, may collect and process personal data relating to my status as an election candidate. I am committed to being transparent about how I collect and use that data and to meeting data protection obligations.

What information may be collected?

I may collect and processes a range of information. Some of this information is mandatory in order to use my website, permit me to respond to questions or to contact voters. This may include:

• Name, address and contact details, including email address and telephone number

How is personal information obtained and why is it processed?

I adhere to the General Data Protection Regulation (GDPR) for the lawful bases for processing personal information.Personal information processed is provided to me directly by you, either in person or via paper or electronic forms, or by the Returning Officer for an election.  It may be used for the following purposes:

• To provide you with election material delivered by hand or by mail

• To deal with enquiries and feedback from voters and users of the website

• To provide access to restricted parts of this website

• To analyse the opinions and views of members of the community and website visitors

• Where I have a legitimate interest in processing personal data.

Processing data allows me to evaluate and improve my offering to the community and to ensure that the provision is always of the highest standard.

Personal information is provided with your consent and in order to provide a community-focused service. You are able to remove your consent at any time. You can do this by contacting me usingany of the contact details and methods on this website  .

I do not share personal information with any third parties unless legally required to do so.

How do I store and safeguardyour personal information?

Your information is securely stored at my address shown at the beginning of this statement. Information submitted directly via this website will also be stored on GDPR compliant systems in accordance with the 20i.com web hosting Data Processing Agreement at https://www.20i.com/legal/gdpr-data-processing-agreement.

My security procedures mean that I may request proof of identity before disclosing sensitive information to you.

I only retains personal information for as long as required to fulfil the purposes for which it was initially collected. After this period, it will either be permanently deleted from any electronic storage or, in the case of paper records (e.g. the Electoral Register), by use of a GDPR compliant shredder. For personal information archived on back-up systems during the retained period, I will securely isolate and protect it from any further processing.

Who has access to data?

Your information may be shared internally where it is required to provide a service, including with members of my campaign team. Internal controls are in place to ensure that your personal data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by team members in the performance of their duties.

What are my data protection rights?

Under data protection law, you have rights including:

• Your right of access - You have the right to ask me for copies of your personal information.

• Your right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.

• Your right to erasure - You have the right to ask me to erase your personal information in certain circumstances.

• Your right to restriction of processing - You have the right to ask me to restrict the processing of your personal information in certain circumstances.

• Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.

• Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you, in certain circumstances.

• You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.