Would you consider these guys to be a data processor or controller

[MrBitey]

Hi all,

 

our PTA have signed up with these guys: https://www.easyfundraising.org.uk/

As a fund raising tool. I believe people have to sign up (username and Email with optional address given) and when they make online purchases,

retailers who are part of the scheme will make a contribution to the PTA funds.

Would this be considered to be a Data Processor for us as a school or are they being data processors for our PTA who would be the data controllers in this case?

Edited March 13, 2018 by MrBitey

[Narwhal]

I can't actually see any link so I don't know the site you are referring to but if it is the likes of easyfundraising.org then I believe that they themselves would be the Data Controller. Your users and PTA are just users of the site.

[MrBitey]

Sorry, edited the original post - no idea why the link didn't work! Yes, it's easyfundraising.org

[djrscally]

What's a PTA?

[elsiegee40]

What's a PTA?

Parent Teacher Association

[MrBitey]

Parent Teacher Association. Sometimes know as 'Friends of School X'

[djrscally]

Parent Teacher Association. Sometimes know as 'Friends of School X'

 

Oh yeah, of course.

 

I have no idea. Who runs the PTA? Parents or Teachers? If Teachers I'd guess the website is a processor for the school as the controller. If Parents and signing up to that site is on an entirely individual basis (I.E. their services are not retained by the PTA, it just recommends them to parents) I'm leaning towards the site being the data controller and the school and PTA being nothing at all.

[rom1984]

I think that sounds like the company that runs the fund raising tool is the controller, and the retailers will be the processors.

 

It might be best practise that the PTA check with the fund raising company to ensure they have sufficient data protection procedures in place so they can give assurance to its members but I don't think the PTA would be a controller or a processor.