PRIVACY POLICY
This is the privacy notice of INSPIRE YOUTH TYNE AND WEAR CIC
The privacy and security of your personal information is extremely important to us. This privacy policy explains how and why we use your personal data, to make sure you stay informed and can be confident about giving us your information.
INSPIRE YOUTH TYNE AND WEAR collects and processes personal data about past and present staff, sessional workers, volunteers, parents, children and young people and beneficiaries. All personal data that INSPIRE YOUTH TYNE AND WEAR collects and processes are in accordance with The General Data Protection Regulations (GDPR), which are underpinned by eight principles. That all personal data must:
1. Be processed fairly and lawfully.
2. Be obtained only for specific, lawful purposes.
3. Be adequate, relevant, and not excessive.
4. Be accurate and kept up to date for 7 years.
5. Not be held for any longer than necessary.
6. Processed in accordance with the rights of data subjects.
7. Be protected in appropriate ways.
8. Not be transferred outside the European Economic Area (EEA).
INSPIRE YOUTH TYNE AND WEAR is committed to processing data in accordance with its responsibilities under the GDPR. Article 5 of the GDPR requires that personal data shall be:
1. Fair, lawful, and transparent processing: Personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject
2. The purpose limitation principle: Personal data may only be collected for specified, explicit and legitimate purposes and must not be further processed in a manner that is incompatible with those purposes.
3. Data minimisation: Personal data must be adequate, relevant, and limited to what is necessary in relation to the purpose for which those data are processed.
4. Accuracy: Personal data must be accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that are inaccurate are either erased or rectified without delay.
5. Data retention periods: Personal data must be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
6. Data security: Personal data must be processed in a manner that ensures appropriate security of that data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organisational measures.
7. Accountability: The controller is responsible for and must be able to demonstrate compliance with the Data Protect Principles.
INSPIRE YOUTH TYNE AND WEAR is committed to maintaining the above principles. INSPIRE YOUTH TYNE AND WEAR collects and processes data on a lawful basis to protect the vital interests of a data subject, or with prior consent from all data subjects. Information gathered is done so under a legitimate vital interest to maintain high safeguarding and health and safety standards, in line with INSPIRE YOUTH TYNE AND WEAR statutory obligations. All data subjects under the age of 16 require consent from a parental figure. Where consent was freely given, date of consent is to be kept with all personal data. All personal data INSPIRE YOUTH TYNE AND WEAR stores will be accurate and checked annually, this information will be checked to ensure that the personal data held is correct. Any inaccurate information will be corrected when notified.
INSPIRE YOUTH TYNE AND WEAR does not share personal data with any other company unless with consent from the data subject or required to by law.
DATA PROTECTION OFFICER
INSPIRE YOUTH TYNE AND WEAR – DPO – Leoni Roberts
DPO responsibility is to ensure the data protection policy is followed.
If you have any questions regarding this privacy notice, including any requests to exercise your legal rights, please contact our DPO – Leoni Roberts leoni.roberts@inspireyouthtw.org