Data Privacy Notice
Details of the personal data controller:
Hurst Hedgehog Haven (HHH)
61 High Street
Personal data is collected from the following data subjects:
HHH rescue volunteers.
HHH release site volunteers.
Members of the public transferring a hedgehog to HHH.
Organisations or individuals providing rehabilitation support to HHH.
The following kinds of personal data is processed (relative to the data subjects listed above):
HHH does not process special category or criminal conviction data.
Personal data is processed for the following purposes:
To enable rescue volunteers to communicate with each other, with release site volunteers, with members of the public in relation to returning a hedgehog to the found location and with organisations or individuals providing rehabilitation support to HHH.
In relation to found locations, to enable the organisation to gather knowledge about local hedgehog presence and maintain a database of potential release sites.
The legal basis for processing personal data is:
Personal data is shared in the following ways:
All personal data is shared between rescue volunteers (only) as necessary.
With consent, rescue volunteer personal data may be shared with HHH release site volunteers, members of
the public transferring a hedgehog to HHH and organisations or individuals providing treatment or
rehabilitation support to HHH as necessary.
Personal data is kept securely in the following ways:
Paper based records – In the private dwelling hospital rooms of rescue volunteers and then on hedgehog
discharge, transferred to a single rescue volunteer private dwelling, locked, archive store.
Electronic computer records – Held on a single rescue volunteer personal computer that is backed-up
monthly, requiring personal login details and with firewall and antiviral protection software installed.
Email, WhatsApp or text messaging between rescue volunteers - On rescue volunteer personal devices,
requiring personal login details. WhatsApp messages are end-to-end encrypted.
Personal data is kept for the following retention periods:
Paper based records – Until they are transferred into electronic record form, a maximum 1 month period.
Electronic computer records – Indefinitely (for as long as the organisation is in operation).
Email, WhatsApp or text messaging between rescue volunteers – Any message containing the personal
details of 2, 3 or 4 data subjects, only until the intended recipient has received the information and used the
information for its intended purpose.
When it is no longer necessary to keep personal data, it is destroyed in the following ways:
Paper based records – Shredded.
Electronic computer records – Deleted, including from any back-up repository.
Emails or WhatsApp / text messaging between rescue volunteers – Deleted.
Information Commission’s Office (ICO) registration:
As a not-for-profit organisation, HHH is not registered with the ICO.
Data Protection Officer (DPO):
As the core activities of the organisation do not meet appointment criteria, HHH does not have a designated
DPO. However, if you wish to contact HHH about any matter concerning your personal data, or to enact any
of your data subject rights, such as access, correction or erasure of your personal data, please contact:
61 High Street (as above)
Tel 07787 515296
Complaints about the way we handle your personal data:
In the first instance, you should contact HHH using the contact details given above. We hope that we can address your concerns, but if you are dissatisfied with our response, you can contact the ICO: https://ico.org.uk/make-a-complaint/