Data Protection Policy Statement in compliance with GDPR

This policy is a statement of Women’s Collective Ireland – Donegal, 6 Tír Chonaill Street, Donegal Town, County Donegal, Ireland, commitment to protect the rights and privacy of individuals and comply with General Data Protection Regulation (GDPR) which seeks to harmonize privacy laws across Europe, heighten accountability for how personal data is acquired and handled and give EU residents more control over their personal data.

Collecting Information

Individuals provide us with their contact details in order to enable them to be fully informed and included in the work of NCCWN Donegal Women’s Network. They are entering an agreement that the details they supply may be shared with other members of the organisation, with the elected representatives of the organisation and with other bodies or persons who require access in order to facilitate the ongoing work of the organisation. They are also agreeing to receive emails and newsletters from us.

WCI Donegal will not supply the information provided to it to any person or organisation not engaged in the organisations work or activities. Individuals or member groups may request to have their personal data supplied to them and/or removed from or updated on the register by giving 30 days’ notice to donegal@womenscollective.ie or by post to the address above.

GDPR Principles
We will carry out our GDPR responsibilities in accordance with the following six principles:

1. Lawfulness, fairness and transparency – WCI Donegal ensures that data is gathered and used in a way that is legal, fair and understandable. The public have the right to know what is being gathered and have this corrected or removed.

2. Purpose limitation – WCI Donegal only uses data for legitimate purposes specified at the time of collection. This data will not be shared with third parties without permission.

3. Data minimisation – The data collected by WCI Donegal is limited only to what is required for the purpose stated. WCI Donegal does not collect data en masse without purpose.

4. Accuracy – The personal data WCI Donegal holds is accurate and kept up to date to the best of our abilities. If it is no longer accurate, it will be rectified or erased.

5. Storage limitation – WCI Donegal only stores personal data for as long as is necessary. Data may be archived securely and used for research purposes in the future.

6. Integrity and confidentiality – WCI Donegal holds personal data in a safe and secure way that takes reasonable steps to ensure the security of this information and avoid accidental loss, misuse or destruction.

Responsibility
Overall responsibility for ensuring compliance with GDPR rests with WCI Donegal. All employees, volunteers and representatives of WCI Donegal who separately collect, control or process the content and use of personal data are individually responsible for compliance with GDPR.

Data Subjects Rights
WCI Donegal is committed to upholding individual’s rights as specified by GDPR: Right to be informed, Right of access, Right to rectification, Right to erasure, Right to restrict processing, Right to data portability, Right to object, Rights in relation to automated decision making.

Review
This Data Protection Policy will be reviewed regularly in light of any legislative or other relevant developments.

Data Retention Policy in Compliance with GDPR

This policy is a statement of how WCI Donegal collects, uses and stores information, how long data is stored and how often data retention is reviewed. This is in compliance with General Data Protection Regulation (GDPR) which seeks to harmonize privacy laws across Europe, heighten accountability for how personal data is acquired and handled and give EU residents more control over their personal data.

Collecting information

Individuals provide us with their contact details in the following ways:

• Submitting details in order to become a member
• Submitting details in order to sign up to a course or programme being offered
• Submitting details to Mail Chimp in order to receive newsletters and information
• Signing attendance sheets and ticking an ‘opt-in’ box to go into contact database
• Signing attendance sheets and ticking an ‘opt-in’ box to consent to taking, holding and publication of photographs
• Requesting inclusion on database by email or telephone (in which case a form must be filled and an ‘opt-in’ box ticked) 

Purpose

The details supplied may be shared with other members of the organisation, with the elected representatives of the organisation and with other bodies or persons who require access in order to facilitate the ongoing work of the organisation. We will not supply the information provided to any person or organisation not engaged in WCI Donegal’s work.

This is in order to enable individuals and the organisations they represent to be fully consulted and included in the work of WCI Donegal. It also ensures that they receive important emails, press releases and newsletters from us.

Retention
WCI Donegal only stores personal data for as long as is necessary. Data may be archived securely and used for research purposes in the future.

Information is audited on an annual basis to determine that all data held is still relevant and accurate. If there is no further reason for holding data it is deleted.

Individuals or member groups may request to have their personal data supplied to them and/or removed or updated by giving 30 days’ notice to donegal@womenscollective.ie or by post to WCI Donegal, 6 Tír Chonaill Street, Donegal Town, Donegal, Ireland.

Review
This Data Protection Policy will be reviewed regularly in light of any legislative or other relevant developments.