Privacy notices

Privacy Notice

This Privacy Notice will illustrate how your personal data and, if applicable, special categories of personal data will be used by LinkLiving.

It will provide you with information about your rights under the General Data Protection Regulation (EU) 2016/679 [GDPR] and the Data Protection Act 2018 and how to action these rights.

Who we are

The Link group of companies is committed to protecting your privacy. The Link group is made up of Link Group (the parent company), Link Housing Association, LinkLiving, C~urb, Horizon Housing Association, Larkfield Housing Association and West Highland Housing Association. Each member of the group is registered as a controller with the Information Commissioner’s Office [ICO].

Each Link group company has entered into a Data Processing Agreement with the other Link companies, which sets out clearly how and why information may be shared. This ensures that we can provide you with the services you expect from us at the same time as meeting our data protection obligations.

To find out about your data is processed by a specific LinkLiving service, please click below:

The data protection principles set out how personal data should be managed.

Data Protection Principles
Principle	What Link has to do
1. Lawfulness fairness and transparency	We need to be clear and upfront about what we use your data for.
2. Purpose limitation	We will only use your data for specific reasons which are set out in this guide.
3. Data minimisation	We will only collect data which is necessary for us to provide a service to you and will delete data when it becomes out of date.
4. Accuracy	We will ensure that any personal data we collect is correct and up to date.
5. Storage limitation	We will keep only what’s necessary in line with our Data Retention Schedule.
6. Integrity and confidentiality	We will ensure we have appropriate security to protect the data we process about you.

We aim for this privacy notice to be clear but comprehensive and provide you with all the information you need to understand how we will manage your data.

What is data?

Personal data

Means any identifiable information about a living person. This can include:

Name
Address
Telephone number
Date of birth
Tenancy reference number
National insurance number

Special categories of personal data

Are defined as personal data relating to a person’s:

Racial or ethnic origin
Political opinions
Religious or other beliefs
Trade Union membership
Health
Sex life or sexual orientation
Genetic or biometric data used to uniquely identify a person

Link is a controller of your personal data. This means that we decide the purpose and conditions of processing of your personal data.

Any supplier, contractor or other third party with whom we share data is called a processor.

What are the conditions of processing?

The conditions of processing are basically the legal reasons for processing your personal data. We have to make it very clear why we process your data. In processing your personal data or special category personal data, Link will rely on one or more of the following conditions of processing, depending on what we are using your personal data for:

For personal data

Consent

You have given your consent to the processing of your personal data.

Contractual

Processing of personal data is necessary for the performance of a contract with you or for Link to take pre-contractual steps at your request.

Legal obligation

Processing of personal data is necessary for Link to comply with a legal obligation.

Vital interests

Processing of personal data is necessary to protect your vital interests or another individual's vital interests (this means life or death situations).

Public task

Processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority conferred on Link

Legitimate interests

Processing is necessary for Link's legitimate interests or a third party's legitimate interests, unless these interests are overridden by your interests or fundamental rights

For Special Categories of Personal Data

Explicit consent

You have given your explicit consent to the processing of your personal data.

Employment law

Processing is necessary for carrying out obligations under employment, social security or social protection law.

Vital interest

Processing is necessary to protect your vital interests of or another person's vital interests where the data subject is physically or legally incapable of giving consent.