Any personal data we collect will only be used as permitted by law.
Our Site is owned and operated by RAIN Foundation LBG, a company limited by guarantee registered in Guernsey under company number 69840 with its registered office at La Colline, Upper St Jacques, St Peter Port, Guernsey, GY1 1SS.
RAIN is established in Guernsey and protects the rights of individuals in relation to their personal data in accordance with the Data Protection (Bailiwick of Guernsey) Act 2017.
Personal data is any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
We refer to any individual for whom we hold personal data as a “Data Subject”.
Where we are processing your personal data, we do so lawfully and in all matters, one or more of the following conditions of the law will apply:
A Data Subject has the right to be advised as to whether RAIN is processing personal data relating to them and, if so, that individual is entitled to one free copy of their personal data (with further copies available at a fee). This is known as a Subject Access Request (“SAR”). Upon receipt of an SAR, RAIN has a period of one month to adhere to the request (an extension of two further months can be sought by RAIN depending upon the complexity and number of requests submitted by the Data Subject).
A Data Subject has the right to data portability. This means that an individual can arrange for the transfer of their personal data from RAIN to another data controller without hindrance. This right can only be utilized where the processing is based on consent or for the performance of a contract. Where a Data Subject invokes the right to data portability, the Data Subject has the right to be given their personal data in a structure, commonly used and machine-readable format suitable for transmission to another data controller. Upon the request of a Data Subject, RAIN must transmit their personal data directly to another controller unless it is technically unfeasible to do so.
RAIN is not obliged to comply with a Data Subject's request under the right of access or right to data portability where it cannot comply with the request without disclosing information relation to another individual who is identified or identifiable from that information.
A Data Subject has the right to object to RAIN's activities relating to the processing of personal data for direct marketing purposes, on grounds of public interest and for historical or scientific purposes.
A Data Subject has the right to require RAIN to complete any incomplete personal data and to rectify or change any inaccurate personal data.
A Data Subject has the right to submit a written request to RAIN regarding the erasure of the Data Subject's personal data in certain circumstances. These include where:
A Data Subject has the right to request, in writing, the restriction of processing activities which relate to the Data Subject's personal data. This right can be exercised where:
Where any rectification, erasure or restriction of personal data has been carried out, the Data Subject has a right to ensure that RAIN notifies any other person to which the personal data has been disclosed about the rectification, erasure or restriction of processing. RAIN must also notify the Data Subject of the identity and contact details of the other person if the Data Subject requests this information.
A Data Subject has the right not to be subjected to automated decision making without human intervention.
You may make a complaint in writing to the supervisory authority (the Office of the Data Protection Commissioner in Guernsey) if you consider that RAIN has breached, or is likely to breach, an operative provision of the data protection law, and the breach involves affects or is likely to affect any of your personal data.