PRIVACY NOTICE
This
Notice was last updated on the 4/11/2019. 1.
Introduction Cairde
le Cheile is the owner of the www.cairdelecheile.com website. If you have any
questions or queries related to this Privacy Notice or the manner in which your
personal data is processed, please see the contact details at the end of this
Notice. Cairde Le
Cheile provides permanent services for people with disability in County
Donegal. The mission of this organisation is to provide sporting, social and
employment opportunities for people with disability, as well as young people
and senior citizens in County Donegal. The purpose
of this Privacy Notice is to inform individuals of the privacy practices that
is involved in the processing of personal data. Individuals will be informed of
the purpose of collection, use and disclosure of personal data. This Notice
demonstrates the transparent and accountable approach of Cairde le Cheile with
regard to the protection of personal data. For the
purpose of clarity, “personal data” is any form of information relating to an
identified or identifiable natural person as specified within Article 4(1) of
the GDPR. 2.
Data Protection
Principles Cairde le
Cheile’s data privacy policy ensures: A.
Lawful, fair and
transparent processing B.
Purpose
Limitation C.
Data Minimisation D.
Accuracy E.
Storage
Limitation F.
Security,
Integrity and Confidentiality This is in
accordance with Article 5(1) of the GDPR. 3.
Data
Subject Rights
Under the
remit of the GDPR, a data subject has the following rights: A.
Right of
Access (Article 15) – for individuals to a copy of their personal data processed
by Cairde le Cheile. B.
Right to
Rectification (Article 16) – where personal data processed by Cairde le Cheile is
inaccurate or incomplete. C.
Right to
Erasure (Article 17) – when personal data is being processed in a manner that is not in
compliance with data protection principles. D.
Right to
Restriction of Processing (Article 18) – this is an alternative to data erasure, where
applicable and appropriate. E.
Right to
Data Portability (Article 20) – the transfer of personal data, provided by the data
subject, to a data controller to another new data controller, without
hinderance and where technically feasible. F.
Right to
Object (Article 21) – where the processing of personal data is used for direct marketing
purposes or causes unwarranted substantial damage and/or distress. Additionally,
a data subject has the right to lodge a complaint with the supervisory
authority, the Irish Data Protection Commission, if they are of the belief the
processing of their personal data infringes the GDPR, as specified in Article
77. 4.
Collection
and Use of Personal Data The
following personal data is collected by Cairde le Cheile: Individual/Individuals Personal
Data Elements Name,
address, telephone number, mobile number, email address, PPS number, date of
birth, disability status, bank account details and National Vetting Bureau
details of all staff members. Clients
and Suppliers Name,
address, telephone number, mobile number, email address, bank account details
from clients who avail of the facilities and our suppliers. Summer
Camp for Young People with Intellectual Disabilities Names of
participants, parents or guardians’ names, address, contact details,
participant’s date of birth, medical background, medication, allergies and
supports required. Benefactors
and Sponsors Name,
address and contact details. Cairde le Cheile
uses the collected personal data for the following uses: ·
Data subject’s
name, address, telephone and mobile number for contact purposes. ·
Staff member’s
name, address PPS number and date of birth and bank details which is shared
with our internal Payroll Department to calculate earnings. ·
To provide
facilities to people with intellectual disabilities & community groups,
recording bookings, footfall include Name, Address, Email Address, Telephone
and Mobile Number. ·
To successfully
carry out and plan summer camps around the needs and capabilities of each
participant and to contact the parent/guardian/carer about the camp and for in
case of emergencies. ·
* The Payroll
Department uses this information on the Welfare Partners system. They are the
controllers of this information. ·
To support Programme
funding enquiries. All data
processed by Cairde Le Cheile will be done on one of the following lawful
bases: consent, contract, legal obligation, vital interests, public task or
legitimate interests. 5.
Disclosure
of Personal Data Cairde le
Cheile will only disclose personal data to third party processors where
necessary to carry out a function of the organization or legal obligation, that
will be in accordance with the lawful basis of processing such personal data. 6.
Use of
Cookies Please see
the Cairde le Cheile Cookie Notice for further information. 7.
Security
Measures and Data Storage Cairde Le
Cheile will ensure that personal data is stored securely using modern software
that is kept-up-to-date. The organisation’s
information security structure will enshrine the principles of confidentiality,
integrity and availability. Hard copies will be stored in a locked cabinet in
an area not accessible to the public. Access to
personal data shall be limited to personnel who need access and appropriate
security will be in place to avoid unauthorised sharing of information. Staff
members, who process personal data, will receive necessary training and have
appropriate knowledge of data privacy to adequately carry out their role. 8.
Retention
Period Cairde le Cheile retain
personal data for as long as necessary in accordance with the above mentioned
uses for which it was obtained. Personal data is retained in line with
the legal bases that permits the processing of the personal data. 9.
Use of
Services by Minors/Vulnerable People Given
the nature of services that Cairde le Cheile offers, it is necessary to process
the personal data of minors and vulnerable people. In relation to this
processing, the organisation will ensure that consent is obtained from
parents/guardians to process the personal data of minors and vulnerable people and that stringent data privacy
measures are in place to protect such personal data. 10.
Sensitive
Information Health
information will be collected during the course of the annual summer camp for
individuals with pre-existing health conditions or those with a disability.
This ensures that appropriate health and safety measures can be taken to
accommodate such individuals while in the care of Cairde le Cheile. In all
other instances, individuals are advised not to disclose sensitive information to
Cairde le Cheile unless required for the fulfillment of a service provided by
the organization. Sensitive Information is referred to personal data such as racial
or ethnic origin, political opinions, religious or philosophical beliefs, or
trade union membership, and the processing of genetic data, biometric data for
the purpose of uniquely identifying a natural person, data concerning health or
data concerning a natural person’s sex life or sexual orientation. Should such
sensitive information be required by Cairde le Cheile, secure transfer measures
should be taken to do so by the individual. 11.
Updates
to this Privacy Policy Cairde le
Cheile reserves the right to amend this Privacy Notice at any time, without
notice to data subjects, other than posting the updated Privacy Notice where
necessary to ensure continued compliance with applicable legislation. The most
recent update to this Privacy Notice will be stated at the beginning of this
document. 12.
Contact
Details If you have any
questions regarding this Privacy Notice, please see the below contact details: C/O
Rosaleen Gallagher, Old
Church, St Conal’s
Campus, Kilmacrennan
Rd, Letterkenny,
Co
Donegal 074-9120123 stconalschurch@gmail.com
Copyright © Cairde le Cheile
This website uses cookies.
By continuing to use this site, you accept our use of cookies. Or you can close this browser window to leave the site. Learn Privacy Policy