Introduction
This is the privacy policy of CRY Ireland (Cardiac Risk in the Young) (hereby referred to as “us” and “we”. We respect your privacy and are committed to protecting your personal data and to complying with its obligations under the General Data Protection Regulation (“GDPR”). This privacy statement will inform you how we look after your personal data when you visit our website.
By visiting our website (www.cry.ie), your personal data will be processed in line with this privacy statement and you accept the terms and conditions for use of this website.
Where this website contains external links to other websites we are not responsible for the privacy policies of these other websites.
We endeavour to comply with the General Data Protection Regulation, Data Protection Acts, ePrivacy Regulation and data protection best practices. This Policy informs individuals how we process personal data in accordance with the principles of data protection identified in the data protection legislation.
We will process any personal information provided to us by individuals, whether it be provided through our website (www.cry.ie), in person, on a form, correspondence, telephone, email or by any other means, or otherwise held by us in relation to you in the manner set out in this policy.
By submitting your information to us and or by using the Website you confirm your consent to the use of your personal information as set out by this Privacy Policy. If you do not agree with the terms of this Privacy Policy please do not use the Website or provide us with any personal information.
Information collected by us
The information about you that we may collect, use, and store (process) includes:
- Information necessary in order to facilitate, process, deliver or that relates to the billing of an agreed business transaction, fundraising or collection of monies or any transaction associated with CRY Ireland (name, address, contact details, billing details, etc.).
- Information you provide to us by filling out any forms on the website or by way of emailing us.
- Records of correspondences whether by email, telephone, through any form on our website or by any other means.
- Information you provide to us in person.
- Details of any business or commercial transactions you carry out with us, whether through email, the website, telephone, or by any other means.
- Details of your visits to our website including traffic data, location data and other communication data in accordance with our cookies that may identify personal information (e.g. cookies) and non-personal information (e.g. information of an anonymised or technical nature).
How we use your personal information
We may use your personal information for the purposes of:
- Processing any enquiry requested by you;
- Setting up, operating and managing any marketing and or fundraising services subject to your explicit consent
- Complying with our legal duties and responsibilities.
- Providing, monitoring, reviewing and supporting our online presence via our website and social media
- Monitoring any billing or credit transactions for the purpose of preventing fraud;
- Provision of security to, and ensuring the health and safety of, employees, volunteers and visitors to company premises.
We will only process such data with the explicit consent of any individual that we request in writing (via a consent form) and the data will be held as confidential, secure, will be used only for the purposes for which it was collected and will be destroyed or deleted once it is no longer necessary (in accordance with our data retention policy).
We do not engage in any automated decision-making processes nor do we use any personal data as a basis for any such automated decisions.
For marketing, fundraising and charitable events. We will use your information to acknowledge donations made by you and to inform you of how you can get involved in upcoming fundraising and other charitable campaigns. We will rely on our legitimate interests to develop and grow the organisation in order to provide charitable services and supports to others as the legal basis under which we will use your personal information in this situation.
Social Media
CRY Ireland engages in a number of social media services and we strive to uphold privacy rights online. However, sometimes members of the public may post something objectionable and beyond our control to CRY Ireland’s social media pages/forums. In such cases, we will act to rectify any difficulties as soon as we are notified or become aware of the problem. We do not provide a continuous monitoring of social media sites/forums so there may be a slight delay from the initial post to when we become aware of a problem.
CRY Ireland sometimes hold marketing or fundraising events in which members of CRY Ireland and the general public may be present. Such events are often held at public locations. Sometimes we may wish to take a photograph at such events to promote our brand or event on social media. In such cases, it is our policy for our photographer/social media handler to announce their presence and provide additional instructions and assistance. However, we do not have any control over private individuals or their social media accounts and we cannot stop members of the public from posting pictures of events online without the consent of all participants.
Social Media
We will take reasonable steps to ensure that your information is kept secure and protected, including but not limited to electronic data being protected using appropriate software, relevant networks safety and security checks, and, where applicable, any physical data records will be kept in an appropriately secure environment.
We have a general data retention policy that relates to the retention of relevant data for seven years. Personal data that is no longer required will be destroyed and or deleted in a secure manner.
We do not record or process personal data that is not required or not necessary for any of our stated purposes.
Requesting your data
Any person has the right to find out whether an organisation has any personal data about them, what they use the personal data for and ask for copies of personal information held by that organisation.
If you wish to make a data access request in order to get a copy of any personal data we may process, please write a letter stating that you wish to make a data access request and address it to:
Lucia Ebbs
CEO
Cardiac Risk in the Young (CRY Ireland)
Unit B14, Tallaght Cross West,
Tallaght,
Dublin 24 D24 R3HC.
Or email Lucia at [email protected]
In order to process your request we may request that you send us a copy of your identification (passport, driver’s license, etc.).
The reason we ask for personal identification is to ensure that you are the correct person making the request for your personal data. Unfortunately, verbal access requests cannot be entertained.
In response to any data access request, you have the right to refer the matter to the Data Protection Commission if you are unhappy with the outcome, however, we ask that you would notify us first of any issue so that we may help resolve it as quickly as possible.
Rectifying mistakes
You have the right to rectify any incorrect or inaccurate personal data at no cost to you.
If you believe that we are incorrectly processing any of your personal data, please inform us by writing to Catherine Powell, Executive Assistant at the above address or email [email protected]
Queries or complaints
If you have any queries or complaints regarding our Privacy Policy or any data protection matter, please let us know by writing to the above person or email us at [email protected]
Individuals have the right to refer any matter to the Data Protection Commission by contacting them at www.dataprotection.ie or by writing to:
Data Protection Commission
Office of the Data Protection Commission
21 Fitzwilliam Square South,
Dublin 2.
D02 RD28
If you are, for whatever reason, considering contacting the Data Protection Commission about us we would ask that you inform us of your difficulty first so that we can try to resolve it to your satisfaction.
CHANGES TO OUR PRIVACY STATEMENT
We reserve the right to make changes to our web privacy policy at any time without prior consultation; these changes will be posted on this page together with the privacy statement revision date. Any changes will become effective upon posting the revised Privacy Policy on the website. If we make any material or substantial changes to this Privacy Policy we will use reasonable endeavours to inform you by email, by notice on the Website or by use of any other agreed communications channels.
COOKIES
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.