The Data Protection and Privacy Policy has been created, and is shared in this post. You will also see a top level menu item so you can access this, and any other policies and procedures for the Flintshire City of Sanctuary.
Data Protection & Privacy
The privacy of our users is extremely important to us and therefore we encourage everybody with an interest in FCoS (Flintshire City of Sanctuary) to read this policy carefully because it contains important information regarding:
- who we are;
- how and why we collect, store, use and share personal information;
- your rights in relation to your personal information; and
- how to contact us and supervisory authorities in the event that you have a complaint.
Who we are
FLINTSHIRE CITY OF SANCTUARY collect, use and are responsible for storing certain personal information about you.
The personal information we collect and use
Personal information is information which you can be identified from (and does not include any anonymised forms of information).
1. Types of personal information
We may process the following types of personal information in relation to you:
-
- Your names
- Your e-mail address
- Your postal address
- Your mobile number
- Your landline telephone number
- Your relationship with us (e.g. supporter etc.)
2. Criminal information
We may collect and process information in respect of any criminal offences in relation to you, including:
Checks carried out with the Disclosure Barring Service (DBS)
How your personal information is collected
This section describes how the above types of personal information are collected by us. Your personal information will be collected as follows:
1. Source of collection of your personal information
The personal information we shall collect in relation to you will be obtained from the following sources:
- correspondence with you
- contact details you provide directly
- information provided to us by third parties
- information searches in the public domain.
2. Changes to the way in which we collect your personal information
In the event that we need to obtain personal information in relation to you from any other source than those described above, we shall notify you of this.
How we use your personal information
1. General purposes
In general, your personal information will be processed for the following purposes:
- to allow us to keep contact with you
- to allow us to engage your help or services in meeting our charitable objectives
- to provide you with our support and services.
Any criminal offence information in relation to you will generally be processed for the following purposes:
DBS checks undertaken to ensure protection for children and vulnerable people who are users of the services we provide
Lawful basis for processing of your personal information
We have described above the purposes for which we may process your personal information. These purposes will at all times be justified by UK data protection law.
1. General lawful bases
The lawful basis upon which we are able to process your personal data are:
- where we have your consent to use your data for a specific purpose;
- where it is necessary to enter into a legal contract with you or to perform obligations under a legal contract with you;
- where it is necessary to enable us to comply with a legal obligation;
- where it is necessary to ensure our own legitimate interests or the legitimate interests of a third party (provided that your own interests and rights do not override those interests). Wherever we rely upon this basis, details of the legitimate interests concerned shall be provided to you;
- where we need to protect your own vital interests (or the vital interests of another person); and/or
- where it is needed in the public interest (or where we are acting in our official functions), provided that the task or function has a clear basis in law.
In general, in order to meet the purposes we have described above, we will process your personal information where it is necessary to protect our legitimate interests, and legitimate interests of others, but only where your own interests and rights do not override these interests. Those legitimate interests are:
To carry out our charitable activities as outlined in our governing document.
2. Lawful bases applicable to criminal information
We have explained above that we may process any criminal offence information in relation to you. We have defined above the general purposes for which we process any criminal information. These purposes are justified by lawful conditions.
There are however additional conditions which must be met in order to process criminal offence data. In order to meet the purposes we have described above, the lawful condition we rely upon in relation to criminal information is that:
the processing is necessary in order to safeguard children or individuals at risk (and where this is in the public interest). Where any such situation arises, we will not obtain your consent.
Sharing of your personal information
On any occasion where any of your personal information is shared with any third party, we shall only permit them to process such information for our required purposes, under our specific instruction, and not for their own purposes. We are required to enter into a formal legal agreement to enable such sharing to take place.
We do not anticipate that we will need to share your personal information with any third party. We will notify should this position change.
Necessity of information
Where information is requested from you and you do not provide this, we may be unable to keep contact with you.
We will inform you at the point of collecting information from you, whether you are required to provide the information to us.
How long your personal information will be kept
Your personal information will only be kept for the period of time which is necessary for us to fulfil the above purposes.
We envisage that your personal information shall be retained by us for the following:
- Name and postal address: 5 years
- Email address: 5 years
- Mobile phone number: 5 years
- Landline telephone number: 5 years
After the period described above, your information shall be properly deleted or anonymised.
Keeping your information secure
We will ensure the proper safety and security of your personal information and have measures in place to do so. We will also use technological and organisation measures to keep your information secure. These measures are as follows:
- Consents to hold and use information will be filed on paper and kept securely
- Data collected will be held in e-format on a computer stick and stored in a secured shared workspace. The e-data will be password-protected.
We have proper procedures in place to deal with any data security breach, which shall be reported and dealt with in accordance with data protection laws and regulations. You shall also be notified of any suspected data breach concerning your personal information.
Children
We do not intend to collect data from children.
Your rights
Under the UK General Data Protection Regulations (GDPR) you have a number of important rights free of charge. In summary, those include rights to:
- fair processing of information and transparency over how we use your use personal information;
- access to your personal information and to certain other supplementary information that this Privacy Statement is already designed to address;
- require us to correct any mistakes in your information which we hold;
- require the erasure of personal information concerning you in certain situations;
- receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit this information to a third party in certain situations;
- object at any time to processing of personal information concerning you for direct marketing;
- object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you;
- object in certain other situations to our continued processing of your personal information, or ask us to suspend the processing procedure in order for you confirm its assurance or our reasoning for processing it;
- object to us processing your personal information where we are doing so, if we are relying upon a legitimate interest of our own or of a third party and where you wish to raise to an objection for this particular reason;
- otherwise restrict our processing of your personal information in certain circumstances;
- claim compensation for damages caused by our breach of any data protection laws; and/or
- in any circumstance where we rely upon your consent for processing personal information, you may withdraw this consent at any time.
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on your rights under the General Data Protection Regulations.
If you would like to exercise any of these rights, please contact our Data Protection Officer: FCOS FINANCIAL SECRETARY in the following manner:
Your Requirements
If you would like this policy in another format (for example: audio, large print, Braille) please contact us using the details below.
Complaints procedure
We hope that we can resolve any query or concern you raise about our use of your information.
The UK General Data Protection Regulation also gives you right to lodge a complaint with the supervisory authority. The supervisory authority in the United Kingdom is the Information Commissioner.
Changes to the privacy policy
This privacy policy was published on 31st March 2022 and last updated on 31st March 2022.
We may change this privacy policy from time to time and will notify you of any changes by:
By a notice in the news section of our website – https://flintshire.cityofsanctuary.org/news
Contacting us
Our Data Protection Officer is the FCOS FINANCIAL SECRETARY.
Any requests or questions regarding the use of your personal information should be made to the above named person using the following method:
Obtaining Copies
Copies of this policy may be downloaded here:
20220329 Data Protection & Privacy Policy