What data do we collect?
We collect the following personal data:
- Personal identification information, specifically your email address if you opt to provide it.
This is collected for the purpose of providing you with a receipt of the transaction.
However, you can make a donation anonymously and choose not to provide an e-mail address. This means you will not get a receipt for your transaction and obtaining a refund would be more difficult.
How do we collect your data?
You directly provide Cardiff Council with the data we collect. We collect data and process data when you:
- Make a donation to the Bute Park Improvement Project Donation Scheme
- Use or view our website via your browser’s cookies.
How will we use your data?
Cardiff Council collects your data so that we can:
- Process your donation
- Provide you with a payment receipt from Cardiff Council
- Record a transaction log containing your unique transaction ID. This will also be displayed within your receipt so you can contact us with any queries about your transaction
- Provide you with a refund if requested
The e-mail address will not be stored or used for any other purpose. It will not be visible to the Bute Park team. The donor’s name is not captured, stored or displayed anywhere.
Cardiff Council do not process or receive any card payment details.
If you make a donation you will also provide your data to our partner company Capita through their Secure Payment Portal. This is so that they can:
- Authorise and process your payment through their secure e-commerce payment portal
- Provide you with a payment receipt from Capita
Your payment card details are directly processed by Pay360 By Capita of Capita Software Services, a leading provider of secure online payments services to local government, and are not collected or accessible by the Council.
Capita Software Services’ online payment solutions are independently assessed and the company is certified by Visa Europe as a Payment Card Industry Data Security Standard (PCI DSS) Level 1 payment processor.
All online card payments are protected by Secure Socket Layer (SSL) with an encryption key length of 128 bits, which is the highest level commercially available.
How do we store your data?
We will only keep your personal data for as long as we need to in order to fulfil the purpose(s) for which it was collected and for so long afterwards as we consider may be required to deal with any questions or complaints that we may receive, unless we elect to retain your data for a longer period to comply with our legal and regulatory obligations.
Retention period will be limited to 2 years in line with Corporate Retention Schedule and PCI Policy.
Cardiff Council will not send you marketing information using data obtained through the Bute Park Improvement Project Donation Scheme.
What are your data protection rights?
Cardiff Council would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access – You have the right to request copies of your personal data from Cardiff Council. We may charge you a small fee for this service.
The right to rectification – You have the right to request that Cardiff Council correct any information you believe is inaccurate. You also have the right to request Cardiff Council to complete the information you believe is incomplete.
The right to erasure – You have the right to request that Cardiff Council erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that Cardiff Council restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to Cardiff Council’s processing of your personal data, under certain conditions.
The right to data portability – You have the right to request that Cardiff Council transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: Dataprotection@cardiff.gov.uk
Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology
For further information, visit allaboutcookies.org.
Cardiff Council’s Cookies Policy is available for review.
How to manage cookies
You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.
Privacy policies of other websites
For further information on how Pay360 By Capita process your personal data, please refer to their Privacy Notice here: https://www.pay360.com/privacy
How to contact us
If you have any questions about Cardiff Council’s privacy policies, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.
Data Protection Officer
Information Governance Team
How to contact the appropriate authority
Should you wish to report a complaint or if you feel that Cardiff Council has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office via their website https://ico.org.uk/ or by calling 0303 123 1113.