South Downs Lottery is jointly provided by South Downs National Park Trust ('the Promoter') and Gatherwell Ltd ('Gatherwell'). The Promoter and Gatherwell are both classed as a data controller, which means that both organisations decide what information is needed from you to provide the Lottery.
The information Gatherwell needs to collect to enable you to participate in the Lottery is your name, address, email address and your date of birth. We need this information to verify your age and identity to ensure you meet the minimum participation age (currently 16 years for this Lottery) and to manage your Lottery account. We will also collect payment details from you to enable you to pay for your lottery tickets. If you do not wish to provide this information, unfortunately you will not be able to participate in the Lottery.
In most cases, we will only have personal data that you provide to us. The legal basis for the collection and processing of your personal data is that you have given your consent and/or that it is our legitimate interest to do so as we could not operate the Lottery without it, and your rights and freedoms are not prejudiced by this.
You have the right to withdraw consent at any time and you can do this by notifying us in writing by email to [email protected]. If you do withdraw your consent, it will not affect the lawfulness of any processing for which we had consent before you withdrew it.
We don't use any computers or automated means to make decisions about you based on the information that you provide. We do not share information with third parties in other countries, however we do use cloud hosted software.
We will only keep your information for as long as is necessary to enable your participation in the Lottery. As standard we keep data for 3 years from the user's last point of activity on the website / As Direct Debit users come with a lifetime guarantee we as standard hold this user data for 7 years.
You have a number of legal rights in respect of your personal data which are: the right to be informed about how it is being used and why; the right of access to it to check that we are acting lawfully and, in some cases, the right to rectify it or to have it erased; the right to restrict our processing of it; the right of data portability; and the right to object to automated decision taking.