Data Protection Policy Statement in compliance with GDPR

This policy is a statement of National Collective of Community based Women’s Network (NCCWN) Donegal Women’s Network, 6 Tír Chonaill Street Donegal Town, Donegal, Ireland, commitment to protect the rights and privacy of individuals and comply with General Data Protection Regulation (GDPR) which seeks to harmonize privacy laws across Europe, heighten accountability for how personal data is acquired and handled and give EU residents more control over their personal data.

Collecting Information

Individuals provide us with their contact details in order to enable them to be fully informed and included in the work of NCCWN Donegal Women’s Network. They are entering an agreement that the details they supply may be shared with other members of the organisation, with the elected representatives of the organisation and with other bodies or persons who require access in order to facilitate the ongoing work of the organisation. They are also agreeing to receive emails and newsletters from us.

NCCWN Donegal Women’s Network will not supply the information provided to it to any person or organisation not engaged in the organisations work or activities. Individuals or member groups may request to have their personal data supplied to them and/or removed from or updated on the register by giving 30 days’ notice to donegalwomensnetwork@gmail.com or by post to the address above.

GDPR Principles
We will carry out our GDPR responsibilities in accordance with the following six principles:

1. Lawfulness, fairness and transparency – NCCWN Donegal Women’s Network ensures that data is gathered and used in a way that is legal, fair and understandable. The public have the right to know what is being gathered and have this corrected or removed.

2. Purpose limitation – NCCWN Donegal Women’s Network only uses data for legitimate purposes specified at the time of collection. This data will not be shared with third parties without permission.

3. Data minimisation – The data collected by NCCWN Donegal Women’s Network is limited only to what is required for the purpose stated. NCCWN Donegal Women’s Network does not collect data en masse without purpose.

4. Accuracy – The personal data NCCWN Donegal Women’s Network holds is accurate and kept up to date to the best of our abilities. If it is no longer accurate, it will be rectified or erased.

5. Storage limitation – NCCWN Donegal Women’s Network only stores personal data for as long as is necessary. Data may be archived securely and used for research purposes in the future.

6. Integrity and confidentiality – NCCWN Donegal Women’s Network holds personal data in a safe and secure way that takes reasonable steps to ensure the security of this information and avoid accidental loss, misuse or destruction.

Responsibility
Overall responsibility for ensuring compliance with GDPR rests with NCCWN Donegal Women’s Network. All employees, volunteers and representatives of NCCWN Donegal Women’s Network who separately collect, control or process the content and use of personal data are individually responsible for compliance with GDPR.

Data Subjects Rights
NCCWN Donegal Women’s Network is committed to upholding individual’s rights as specified by GDPR: Right to be informed, Right of access, Right to rectification, Right to erasure, Right to restrict processing, Right to data portability, Right to object, Rights in relation to automated decision making.

Review
This Data Protection Policy will be reviewed regularly in light of any legislative or other relevant developments.

Data Retention Policy in Compliance with GDPR

This policy is a statement of how NCCWN Donegal Women’s Network collects, uses and stores information, how long data is stored and how often data retention is reviewed. This is in compliance with General Data Protection Regulation (GDPR) which seeks to harmonize privacy laws across Europe, heighten accountability for how personal data is acquired and handled and give EU residents more control over their personal data.

Collecting information

Individuals provide us with their contact details in the following ways:

• Submitting details in order to become a member
• Submitting details in order to sign up to a course or programme being offered
• Submitting details to Mail Chimp in order to receive newsletters and information
• Signing attendance sheets and ticking an ‘opt-in’ box to go into contact database
• Signing attendance sheets and ticking an ‘opt-in’ box to consent to taking, holding and publication of photographs
• Requesting inclusion on database by email or telephone (in which case a form must be filled and an ‘opt-in’ box ticked) 

Purpose

The details supplied may be shared with other members of the organisation, with the elected representatives of the organisation and with other bodies or persons who require access in order to facilitate the ongoing work of the organisation. We will not supply the information provided to any person or organisation not engaged in NCCWN Donegal Women’s Networks work.

This is in order to enable individuals and the organisations they represent to be fully consulted and included in the work of NCCWN Donegal Women’s Network. It also ensures that they receive important emails, press releases and newsletters from us.

Retention
NCCWN Donegal Women’s Network only stores personal data for as long as is necessary. Data may be archived securely and used for research purposes in the future.

Information is audited on an annual basis to determine that all data held is still relevant and accurate. If there is no further reason for holding data it is deleted.

Individuals or member groups may request to have their personal data supplied to them and/or removed or updated by giving 30 days’ notice to donegalwomensnetwork@gmail.com or by post to NCCWN Donegal Women’s Network, 6 Tír Chonaill Street Donegal Town, Donegal, Ireland.

Review
This Data Protection Policy will be reviewed regularly in light of any legislative or other relevant developments.