Privacy & Cookies Policy


Effective: 11/02/2020

1 - Introduction

Holocaust Educational Trust (“HET”)  (referred to as “We, “Our” or “Us”), is committed to protecting the privacy and security of your personal information.  The Holocaust Educational Trust is a registered charity in England and Wales (1092892) and in Scotland (SC042996).

We have developed this privacy policy to inform you of the data we collect, what we do with your information, what we do to keep it secure as well as the rights and choices you have over your personal information.

Throughout this document we refer to Data Protection Legislation which means the Data Protection Act 2018 which incorporates the General Data Protection Regulation (GDPR), the Privacy and Electronic Communications (EC Directive) Regulations 2003 and any legislation implemented in connection with the General Data Protection Regulation which is the governing legislation that regulates data protection across the European Economic Area (EEA). This includes any replacement legislation coming into effect from time to time. 

HET is the controller for the personal information we process, unless otherwise stated.

We are registered   with the Information Commissioner’s Office (the ICO) with registration number Z5371798

You can contact us either by phone, email or post.

Our Data Protection Officer is:

The DPO Centre Ltd.
50 Liverpool Street

Phone: 0203 797 1289


2 - The information we collect and when

We only collect personal information that we know we will genuinely use and in accordance with the Data Protection Legislation.  The type of personal information that we will collect on you, and you voluntarily provide to us on this  may include some or all of the following:

  • Name and job title.
  • Contact information, including home address, postcode and email address.
  • Only if registering for Lessons from Auschwitz: date of birth, passport details.
  • Only if purchasing items or making a donation: bank card details.

You are under no statutory or contractual requirement or obligation to provide us with your personal information; however we require at least the information above in order for us to deal with you in an efficient and effective manner.

The legal basis for processing your data is based on:

  • your consent
  • performance of a contract;
  • compliance with a legal obligation
  • our legitimate interest that we will have requested/stated at the point the information was initially provided, therefore we will not store, process or transfer your data unless we have an appropriate lawful reason to do so. 

3 - How we use your information

  • For our own internal records.
  • To monitor website usage.
  • To send registered users emails about our resources, programmes and events.
  • To fulfil orders for tickets for events or to process any donations made to the Trust.
  • To process applications for the Lessons from Auschwitz Project.

4 - Who we might share your information with

We may share your personal data with other organisations in the following circumstances:

  • If the law or a public authority says we must share the personal data;
  • If we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of preventing fraud and reducing credit risk); or
  • From time to time, employ the services of other parties for dealing with certain processes necessary for the operation of our Website. However, all the information we share will be collected and anonymised, so neither you nor any of your devices can be identified from it.
  • Airline, taxi and hotel companies in order to arrange appropriate transport, flights and hotels for our Lessons from Aushwitz programme.
  • We do not store credit card details nor do we share customer details with any 3rd parties.

5 - Records of Processing Activities

As required under Article 30 of the GDPR, we have a Records of Processing Activity (RoPA) which mandates what we do with personal data and details whose personal data we use (e.g. our staff, customers, clients etc), where it is transferred (around the EEA or globally), how long we keep it for and how it is deleted/destroyed when no longer needed.

6 - How we keep you updated on our products and services

We will send you relevant offers and news about HET in a number of ways including by email, but only if you have previously consented to receive these marketing communications. When you register with us we will ask if you would like to receive marketing communications, and you can change your marketing choices online, over the phone or in writing at any time.

If you wish to amend your marketing preferences (including opting out) you can do so by contacting our Public Affairs Officer by emailing This email address is being protected from spambots. You need JavaScript enabled to view it., FAO: Public Affairs

7 - Links

This website contains links to other websites, which are clearly marked as such. Please note that we have no control over external websites and are not responsible for the protection and privacy of any information which you may provide to them. Please refer to a website’s privacy policy when using it.

8 - Your rights over your information

8.1.1 - The right to be informed about our collection and use of personal data;

You have the right to be informed about the collection and use of your personal data. We ensure we do this with our internal data protection policies and through our external website policy. These are regularly reviewed and updated to ensure these are accurate and reflect our data processing activities.

8.1.2 - Right to Access Your Personal Information

You have the right to access the personal information that we hold about you in many circumstances, by making a request. This is sometimes termed ‘Data Subject Access Request’. If we agree that we are obliged to provide personal information to you (or someone else on your behalf), we will provide it to you or them free of charge and aim to do so within 30 days from when your identity has been confirmed.

We would ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information.

If you would like to exercise this right, please contact us as set out below.

8.1.3 - Right to Correction Your Personal Information

If any of the personal information we hold about you is inaccurate, incomplete or out of date, you may ask us to correct it.

If you would like to exercise this right, please contact us as set out below.

8.1.4 - Right to Stop or Limit Our Processing of Your Data

You have the right to object to us processing your personal information for particular purposes, to have your information deleted if we are keeping it too long or have its processing restricted in certain circumstances.

If you would like to exercise this right, please contact us as set out below.

8.1.5 - Right to Erasure

You have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances.

If you would like to exercise this right, please contact us as set out below.

8.1.6 - For more information about your privacy rights

The Information Commissioner's Office (ICO) regulates data protection and privacy matters in the UK. They make a lot of information accessible to consumers on their website and they ensure that the registered details of all data controllers such as ourselves are available publicly. You can access them here

You can make a complaint to the ICO at any time about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first. Your satisfaction is extremely important to us, and we will always do our very best to solve any problems you may have.

9 - How long we keep your information for

We retain a record of your personal information in order to provide you with a high quality and consistent service. We will always retain your personal information in accordance with the Data Protection Legislation and never retain your information for longer than is necessary.

10 - Giving your reviews and sharing your thoughts

You may be able to share information through social networks like Facebook and Twitter. For example, when you ‘like’, ‘share’ or review our Services. When doing this, your personal information may be visible to the providers of those social networks and/or their other users. Please remember it is your responsibility to set appropriate privacy settings on your social network accounts so you are comfortable with how your information is used and shared on them.

11 - Security

Data security is of great importance to HET and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure your collected data.  We store your data on our secure servers based in the UK.

We take security measures to protect your information including:

  • Limiting access to our buildings to those that we have determined are entitled to be there;
  • Implementing access controls to our information technology;
  • We use appropriate procedures and technical security measures (including strict encryption, anonymisation and archiving techniques) to safeguard your information across all our computer systems, networks, websites, mobile apps, offices and stores.
  • Never asking you for your passwords;
  • Advising you never to enter your account number or password into an email or after following a link from an email.

12 - Changes to Our Privacy Policy

We may change this Privacy Policy from time to time (for example, if the law changes). We recommend that you check this policy regularly to keep up-to-date.

13 - How to contact us

If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this policy, the way your personal information is processed, please contact us by one of the following means:

By email: This email address is being protected from spambots. You need JavaScript enabled to view it.

By telephone: +44 (0)20 7222 6822
By post: BCM Box 7892, London, WC1N 3XX

14 - Cookies

Cookies and how we use them:

A cookie is a small file placed on your computer’s hard drive which enables our website to identify your computer as you view different pages.

We only use cookies for the following purposes:

  • To monitor how visitors are using the website. We use Google Analytics to learn information about our users, such as which country they live in and which pages are most read and how long they are read for. This enables us to improve our website. It does not allow us to obtain personal information about visitors.
  • To enable registered users’ browsers to remember their username and password for the Teaching Resources section of the site, should they wish them to do so.
  • To remember search terms users have entered to make searching the website easier for them.
  • To allow users to link to the site on social media.

We do not use cookies for the following purposes:

  • To collect any personally identifiable information, unless you have chosen to give it to us when registering for Lessons from Auschwitz or for the Teaching Resources section of the site.
  • To pass any information to advertisers or any other third parties.

Under the European Union’s e-Privacy Directive, we need your permission to store cookies on your computer or device. Like many charities, we need time to develop the website to enable us to record permission from our visitors. Until that time, the best means for us to get your consent is by letting you know here how we use cookies. If your internet browser’s settings accept cookies then we assume that you are happy for us to use them. If you do not wish us to use cookies, then please change your browser settings to turn them off and delete them from your browsing history. For guidance on controlling cookies on different browsers and devices, a helpful guide can be found here. Please be aware that disabling cookies may affect your experience of using the website.