PRIVACY POLICY | Family Lines

Policy

This privacy policy notice is served by Family Lines Genealogy under the website; www.familylinesgenealogy.com, operated by Beverley Turner. The purpose of this policy is to explain to you how we control, process, handle and protect your personal information through the business and while you browse or use this website.

Article 5 of the GDPR stipulates the following principles relating to processing of personal data.

Personal data shall be;

Processed lawfully, fairly and in a transparent manner in relation to the data subject.
Collected for specified, explicit and legitimate purposed and not further processed in a manner that is incompatible with those purposes. Further processing for archiving purposed in the public interest, scientific or historical research purposed or statistical purposed shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes.
Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.
Kept in a form which permits identification of data subject for no longer than is necessary for the purposes for which the personal data are processed. Personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject.
Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

Consent to collection of personal information and how it will be used:

Before genealogical research is carried out, you will be asked to consent to the collection and processing of personal information which is necessary to carry out the requested research on your behalf. Family Lines Genealogy will collect necessary personal data and information in order to conduct the research as requested. Personal details or documents provided by you which contain information about living people are provided with their implied consent.

We may process your data because;

You have consented for us to do so.
We need to enter into a contract with you.
We may be legally obliged to.
It is within our legitimate interests, but not overridden by your rights.
To process payment.

By agreeing to these terms, you agree to us holding your personal information as is required and necessary to conduct the research on your behalf and for Family Lines Genealogy to retain them for a minimum period of 5 years as required by law.

Your individual rights:

Under the GDPR, your individual rights are as follows;

Right to be informed. Individuals have the right to be informed about the collection and use of their personal data.
Right of access. Individuals have the right to access and receive a copy of their personal data, and other supplementary information.
Right to rectification. The UK GDPR includes a right for individuals to have inaccurate personal data rectified, or completed if it is incomplete.
Right to erasure. The UK GDPR includes a right for individuals to have their personal data erased.
Right to restrict processing. Individuals have the right to request the restriction or suppression of their personal data.
Right to data portability. The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.
Right to object. The UK GDPR gives individuals the right to object to the processing of their personal data in certain circumstances.
Rights related to automated decision making including profiling. The UK GDPR has provisions on;
- Automated individual decision-making (making a decision solely by automated means without any human involvement); and
- Profiling (automated processing of personal data to evaluate certain things about an individual). Profiling can be part of an automated decision-making process.

Data security and protection

We ensure the security of any personal information we hold by using secure data storage technologies and precise procedures in how we store, access and manage that information. Our methods meet the GDPR compliance requirement.

All personal information stored electronically is password protected on anti-virus protected devices. Backups stored on external drives are kept in a locked filing cabinet.
Paper copies of any communication or documentation are stored in a locked filing cabinet.

We will not share any personal information belonging to you with anyone, unless you have given written permission to do so.

Internet cookies

We use cookies on this website to provide you with a better user experience. We do this by placing a small text file on your device / computer hard drive to track how you use the website, to record or log whether you have seen particular messages that we display, to keep you logged into the website where applicable, to display relevant adverts or content, referred you to a third party website.

Some cookies are required to enjoy and use the full functionality of this website.

We use a cookie control system which allows you to accept the use of cookies, and control which cookies are saved to your device / computer. Some cookies will be saved for specific time periods, where others may last indefinitely. Your web browser should provide you with the controls to manage and delete cookies from your device, please see your web browser options.

Lawfulness, fairness and transparency:

You have the right to access your personal data, and such requests made to us will be dealt with in a timely manner. Any requests should be made in writing.

Data minimisation and accuracy:

We will take all reasonable steps to ensure personal data is accurate, relevant and limited to what is required in relation to the research requested. We will ensure that all data is kept up to date.