Your Personal Data and the General Data Protection Regulation 2013 (GDPR) The Friends of St Mary’s, Bacton, take the privacy of your personal data very seriously and we are committed to adhering to the requirements of new Europe-wide General Data Protection Regulation that came into force in May 2018. This Regulation shifted the ownership of personal data from the entity gathering it to the person to whom the data refers. In so doing, the Regulation gave that person considerable powers over their data, in particular the right to be forgotten by the entity holding their data as well as the right to see what data the entity was holding and to correct it should there be any inaccuracies in it. The Regulation also requires the entity holding personal data to declare, amongst other things, what data they hold, how long they hold it for, what they use it for and with whom they share it. The Regulation also makes the entity holding personal data accountable for the security of the data they hold in respect of how it is stored and disposed of. Crucially, any entity holding personal information has to have obtained the consent (in our case, but there are other legal bases) of the person to whom the data refers to hold and use that data. Your consent was conferred to us when you completed the application form to join the Friends or when you applied to participate in one of our events. If you have previously given us your personal data when you joined the Friends or when you took part in an event organised by us and now wish to withdraw that consent, you can do so using the Consent Withdrawal Form . You can request to see the personal data we hold concerning you using the Data Access Request Form . You can see details of our privacy policy by viewing our Privacy Statement or by e-mailing the Data Protection Officer . Safeguarding of Minors and Vulnerable Persons. Details can be viewed in our Safeguarding Policy .