This policy outlines the use of personal data under the Data Protection Act 2018 and the General Data Protection Regulations (“GDPR”) For the purpose of DPA and GDPR Youth Cymru are the data controller and any enquiry regarding the collection or processing of your data should be addressed to Youth Cymru.
Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone, or in conjunction with any other information in the data controller’s possession, or likely to come into their possession.
Information We Collect
Personal information includes identifiers such as; your name, date of birth, email address, postal address, telephone number, as well as information you provide in any communications between us. You will have given us some or all of this information through:
your interactions with us – including; registering on our mailing list, using our website, joining our online forum, making a booking on our website, attending an event or training course and seeking advice / support.
How the Information Collected is used
Youth Cymru complies with its obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We will process your personal data based on your consent, and/or because we need to use it in order to fulfil a contract with you (e.g. because you have subscribed to our membership, engaged with our programmes and/or legitimate interest).
Legitimate interest means there is a valid reason for Youth Cymru to do so. This could include; making improvements to our services, to manage relationships with our supporters and to comply with relevant legislation. Whenever we process your information in this way, we ensure that we consider your rights and interests.
We will never sell or swap your details. We may share your information with trusted third parties in the process of managing your engagement with us, such as the payment processing of donations or to partners who manage our events.
We use your personal data for the following purposes:
· To enable us to provide support and advice for the benefit of those working with children and young people within the Youth Sector.
· To administer membership subscriptions and activities;
· To fundraise and promote the interests of the charity;
· To manage our recruitment processes, employees, trustees and volunteers;
· To maintain our own accounts and records;
· To inform you of news, events, activities and services we offer;
Personal information provided to the Charity by you will only be used for the purposes stated when the information is requested. Personal information will not be sold to third parties, or provided to direct marketing companies or other such organisations without your permission.
What is the legal basis for processing your personal data?
Explicit consent of the data subject so that we can keep you informed about news, events, activities and services offered by Youth Cymru.
Processing is necessary for carrying out legal obligations.
Sharing of information with partners or third parties is only done so where consent has been provided.
However, we may disclose your information to regulatory bodies to enable us to comply with the law and to assist fraud protection and minimise credit risk.
Please be advised that we do not reveal information about identifiable individuals to our stakeholders without consent from the data subject, but we may, on occasion, provide them with anonymised information.
Protecting Children and Young People
Where we believe any of our services may attract children and young people under the age of 16, we will clearly provide information notices to try and deter children from providing their personal data without parent or guardian consent.
We do not knowingly intend to send marketing communications to children and young people.
We actively encourage all our staff, whenever they are implementing new initiatives to assess whether these might be attractive to children and young people and if so, will ensure clear information is provided to try and deter children and young people from providing their personal data without parent or guardian consent.