This Notice was last updated on the 4/11/2019.

1.      Introduction

Cairde le Cheile is the owner of the website. If you have any questions or queries related to this Privacy Notice or the manner in which your personal data is processed, please see the contact details at the end of this Notice.

Cairde Le Cheile provides permanent services for people with disability in County Donegal. The mission of this organisation is to provide sporting, social and employment opportunities for people with disability, as well as young people and senior citizens in County Donegal.

The purpose of this Privacy Notice is to inform individuals of the privacy practices that is involved in the processing of personal data. Individuals will be informed of the purpose of collection, use and disclosure of personal data. This Notice demonstrates the transparent and accountable approach of Cairde le Cheile with regard to the protection of personal data.

For the purpose of clarity, “personal data” is any form of information relating to an identified or identifiable natural person as specified within Article 4(1) of the GDPR.

2.      Data Protection Principles

Cairde le Cheile’s data privacy policy ensures:    

A.      Lawful, fair and transparent processing

B.      Purpose Limitation

C.      Data Minimisation

D.     Accuracy

E.      Storage Limitation

F.       Security, Integrity and Confidentiality

This is in accordance with Article 5(1) of the GDPR.

3.      Data Subject Rights   

Under the remit of the GDPR, a data subject has the following rights:

A.      Right of Access (Article 15) – for individuals to a copy of their personal data processed by Cairde le Cheile.

B.      Right to Rectification (Article 16) – where personal data processed by Cairde le Cheile is inaccurate or incomplete.

C.      Right to Erasure (Article 17) – when personal data is being processed in a manner that is not in compliance with data protection principles.

D.     Right to Restriction of Processing (Article 18) – this is an alternative to data erasure, where applicable and appropriate.

E.      Right to Data Portability (Article 20) – the transfer of personal data, provided by the data subject, to a data controller to another new data controller, without hinderance and where technically feasible.

F.       Right to Object (Article 21) – where the processing of personal data is used for direct marketing purposes or causes unwarranted substantial damage and/or distress.

Additionally, a data subject has the right to lodge a complaint with the supervisory authority, the Irish Data Protection Commission, if they are of the belief the processing of their personal data infringes the GDPR, as specified in Article 77.

4.      Collection and Use of Personal Data

The following personal data is collected by Cairde le Cheile:


Personal Data Elements

Staff *

Name, address, telephone number, mobile number, email address, PPS number, date of birth, disability status, bank account details and National Vetting Bureau details of all staff members.

Clients and Suppliers

Name, address, telephone number, mobile number, email address, bank account details from clients who avail of the facilities and our suppliers.

Summer Camp for Young People with Intellectual Disabilities

Names of participants, parents or guardians’ names, address, contact details, participant’s date of birth, medical background, medication, allergies and supports required.

Benefactors and Sponsors

Name, address and contact details.


Cairde le Cheile uses the collected personal data for the following uses:

·         Data subject’s name, address, telephone and mobile number for contact purposes.

·         Staff member’s name, address PPS number and date of birth and bank details which is shared with our internal Payroll Department to calculate earnings.

·         To provide facilities to people with intellectual disabilities & community groups, recording bookings, footfall include Name, Address, Email Address, Telephone and Mobile Number.

·         To successfully carry out and plan summer camps around the needs and capabilities of each participant and to contact the parent/guardian/carer about the camp and for in case of emergencies.

·         * The Payroll Department uses this information on the Welfare Partners system. They are the controllers of this information.

·         To support Programme funding enquiries.

All data processed by Cairde Le Cheile will be done on one of the following lawful bases: consent, contract, legal obligation, vital interests, public task or legitimate interests.

5.      Disclosure of Personal Data

Cairde le Cheile will only disclose personal data to third party processors where necessary to carry out a function of the organization or legal obligation, that will be in accordance with the lawful basis of processing such personal data.

6.      Use of Cookies

Please see the Cairde le Cheile Cookie Notice for further information.

7.      Security Measures and Data Storage

Cairde Le Cheile will ensure that personal data is stored securely using modern software that is kept-up-to-date. The organisation’s information security structure will enshrine the principles of confidentiality, integrity and availability. Hard copies will be stored in a locked cabinet in an area not accessible to the public.

Access to personal data shall be limited to personnel who need access and appropriate security will be in place to avoid unauthorised sharing of information. Staff members, who process personal data, will receive necessary training and have appropriate knowledge of data privacy to adequately carry out their role.

8.      Retention Period

Cairde le Cheile retain personal data for as long as necessary in accordance with the above mentioned uses for which it was obtained.  Personal data is retained in line with the legal bases that permits the processing of the personal data.


9.      Use of Services by Minors/Vulnerable People

Given the nature of services that Cairde le Cheile offers, it is necessary to process the personal data of minors and vulnerable people. In relation to this processing, the organisation will ensure that consent is obtained from parents/guardians to process the personal data of minors and vulnerable people and that stringent data privacy measures are in place to protect such personal data.

10.  Sensitive Information

Health information will be collected during the course of the annual summer camp for individuals with pre-existing health conditions or those with a disability. This ensures that appropriate health and safety measures can be taken to accommodate such individuals while in the care of Cairde le Cheile. In all other instances, individuals are advised not to disclose sensitive information to Cairde le Cheile unless required for the fulfillment of a service provided by the organization. Sensitive Information is referred to personal data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation. Should such sensitive information be required by Cairde le Cheile, secure transfer measures should be taken to do so by the individual.

11.  Updates to this Privacy Policy

Cairde le Cheile reserves the right to amend this Privacy Notice at any time, without notice to data subjects, other than posting the updated Privacy Notice where necessary to ensure continued compliance with applicable legislation. The most recent update to this Privacy Notice will be stated at the beginning of this document.

12.  Contact Details

If you have any questions regarding this Privacy Notice, please see the below contact details:


Cairde Le Cheile,

C/O Rosaleen Gallagher,

Old Church, St Conal’s Campus,

Kilmacrennan Rd,


Co Donegal