- makes sure they have read and agree to our principles and values;
- makes sure they understand the importance of data protection and that this applies to everyone;
- adds them to Action Network, our database of 'members'.
When you organise or take action in the name of Extinction Rebellion you agree to hold yourself to the following:
1. Data Protection Agreement
Dear Rebels, we’re grateful you’re here.
Adhering to a set of principles for how we handle data will ensure we build trust between ourselves and other organisations.
As a volunteer you’ll both provide, and be privy to, confidential or sensitive information, including individuals’ personally identifiable data (i.e. name, telephone number and email).
It is important you keep that information secure and confidential and use it only for the purpose for which it was provided, with the consent of the individual.
As Rebels, we need to treat our Data the way we do one another and our planet, with love and care. So, we’re gonna keep it simple, with three principles to wrap our Data in:
Protect, Consent, Choose
We’ll protect our Data from misuse.
We’ll ensure it’s used with consent.
We’ll guarantee choice; that consent can always be withdrawn.
If you bear these three principles in mind, when handling yours or others’ Data, we’ll be in a safe place.
As a Rebel, I agree to the following:
Compassionate Revolution Ltd is the “data owner”. This link will take you to the page of the this 'data ownner'.
I am acting in a voluntary capacity as a “processor” for Compassionate Revolution Ltd. The ICO defines a “processor” as: “data processor”, in relation to personal data, means any person (other than an employee of the data controller) who processes the data on behalf of the data controller.
I will comply with GDPR legislation when storing, processing, and transferring sensitive or personal information
protect our data and ensure that it is stored securely.
only process data for the purpose for which it was provided.
assist with subject access requests and potential removal or correction of data.
* I will read and comply with Extinction Rebellion’s Policies and Procedures for handling data (and understand these may be updated from time to time).
I understand that breaches of this policy could incur severe financial penalties for XR.
I understand that if I do not comply with this agreement, I may be asked to step down from my role within XR.
I understand that this duty of confidentiality is indefinite and continues after my involvement with XR has finished.
2. Spreadsheet Risk Management
As a radically transparent network, it is important to take control of your own data and for all of us to be responsible for our own decisions.
Spreadsheets are for internal purposes only and signing this agreement, which is also a prerequisite for access and editing rights, makes it unlawful to share spreadsheets and any personal data publicly.
Despite this safeguard, it is important to be aware that there’s a risk that spreadsheets could be leaked into the public domain and receive media attention.
Further, there are risks - we think they are low - involved with your info being entered into a spreadsheet where people could be identified as “organisers” - different legal charges can apply, see link above.
There are no specific information requirements for spreadsheets; you have control over what contact details you share, options are: name/nickname, phone number/dedicated sim/phone, email/dedicated secure email address; i.e. you could input a dedicated phone number, but not your name etc.