GDPR and Data PRivacy Policy
1. Introduction
The Centre for Popular Education (C4PE), and The Rosa LuxemburgStiftung Great Britian (RLS), within which the C4PE sits (“we”, “us”, “our”) arecommitted to protecting personal data and respecting the privacy of everyone wework with. This policy explains how we collect, use, store, and protectpersonal data in accordance with the UK General Data Protection Regulation (UKGDPR) and the Data Protection Act 2018.
Thispolicy applies to: - Visitors to our website - People who sign up to ourmailing list - Participants in our political education courses - Trade unioncontacts and representatives
2. Data Controller
RLS is the data controller for the personal data we process.
Contact details:
Email: emma.williams@rosalux.org
Address: Rosa-Luxemburg-Stiftung Great Britain, Pelican House, 144 CambridgeHeath Road, London E1 5QJ
3. What PersonalData We Collect
a) Mailing List Sign‑Ups
We may collect: -Name - Email address - Trade union affiliation (optional) – Role held withinunion (optional) – Areas of interest
b) Course Participants
When someoneregisters for or takes part in our courses, we may collect: - Name - Emailaddress - Phone number (if required for course administration) - Trade unionand role – Educational attainment level - Accessibility or dietary requirements(where relevant) - Feedback and evaluation responses
We do notintentionally collect sensitive personal data unless it is necessary(e.g. accessibility requirements), and we handle such data with additionalcare.
4. Special Category Data
Some information (for example, trade union membership oraccessibility needs) may be considered special category data under UKGDPR.
We only collect this data: - Where it is necessary for deliveringour courses or events, and - With your explicit consent, or wherepermitted by law for not‑for‑profit organisations with a political or tradeunion purpose.
5. How We Use PersonalData
We use personal data to: - Administer and deliver courses and events- Communicate with participants about their courses - Send newsletters andupdates about our work - Improve our courses and services - Meet legal orregulatory obligations
We will not use personal data for purposes that are incompatiblewith these aims.
6. Lawful Bases forProcessing
Under UK GDPR, our lawful bases include:
· Consent – for mailing list subscriptions and optional communications
· Contract – to administer course participation
· Legitimate interests – for organisational communications with trade unions andparticipants, where this does not override individual rights
· Legal obligation – where required by law
7. Marketing andNewsletters
We send newsletters and updates only to people who have: - Activelysigned up via our website, or - Explicitly agreed to receive communicationswhen registering for a course
All newsletters: - Clearly identify us as the sender - Explain whythe recipient is receiving the email - Include a clear unsubscribe link
You can opt out of communications at any time.
8. Data Sharing
We do not sell personal data.
Wemay share data with: - Trusted service providers (e.g. email platforms,course administration tools) - Trainers or facilitators, where necessary forcourse delivery
Allthird parties are required to handle data securely and lawfully.
9. Data Retention
We only keep personal data for as long as necessary: - Mailing listdata: until you unsubscribe - Course participant data: typically up to 10 yearsfor reporting and evaluation - Financial or contractual records: as required bylaw
Data is securely deleted when no longer needed.
10. Your DataProtection Rights
Under UK GDPR, individuals have the right to: - Be informed abouthow their data is used - Access their personal data - Correct inaccurate orincomplete data - Request deletion of their data - Restrict or object toprocessing - Withdraw consent at any time - Data portability (where applicable)
To exercise these rights, contact us at emma.williams@rosalux.org
11. Complaints
Ifyou are unhappy with how we handle your data, you can complain to us directly.You also have the right to complain to the Information Commissioner’s Office(ICO):
www.ico.org.uk
12. Data Security
We take appropriate technical and organisational measures to protectpersonal data, including: - Secure storage systems - Access controls - Staffand volunteer training
13. Policy Review
This policy will be reviewed regularly and updated as required.
Last updated: 17.12.2025
