Privacy & Cookie Policy

Data Protection Policy

Personal contact information provided to the BFRC is used solely for the purposes of responding to an individual request, which may require communications to other BFRC staff, associates or volunteers. The personal information will be stored in a contact register and will not be shared with any third party for any purposes. Individuals may request BFRC to declare what personal contact details are held for them and for BFRC to remove personal details.

General Policy

Ballincollig Family Resource Centre is committed to a policy of protecting the rights and privacy of individuals in accordance with the Data Protection Act 1988 and the Data Protection (Amendment) Act 2003. For administrative purposes (e.g. to pay staff, to administer programmes, to record progress and to comply with legal obligations to funding bodies and government), the Centre needs to process personal data about its staff, volunteers and other individuals with whom it has dealings. To comply with the law, personal data must be collected and used fairly, stored safely and securely and not disclosed to any third party unlawfully.

Individuals’ Responsibilities

Any member of the Centre who is involved in the collection, storage or processing of personal data has responsibilities under the legislation and should make sure to:

  • Obtain and process personal data fairly
  • Keep such data only for explicit and lawful purposes
  • Disclose such data only in ways compatible with these purposes
  • Keep such data safe and secure
  • Keep such data accurate, complete and up-to-date
  • Ensure that such data are adequate, relevant and not excessive
  • Retain such data for no longer than is necessary for the explicit purpose
  • Give, on request, a copy of the data to the individual to whom they relate such a request is known as an Access Request.

Individual Rights

The individuals for whom the Centre stores personal data have the following rights:

  • To have their personal data obtained and processed fairly, kept securely and not illegitimately disclosed to others
  • To be informed of the identity of the Data Controller and of the purpose for which the information is held
  • To get a copy of their personal data
  • To have their personal data corrected or deleted if inaccurate
  • To prevent their personal data from being used for certain purposes: e.g. blocked for research purposes
  • Under Employment Rights, not to be forced to disclose information to a prospective employer. No one can force another person to make an access request, or reveal the results of an access request, as a condition of recruitment, employment or provision of a service. Where vetting for employment purposes is necessary, this can be facilitated where the individual gives consent to the data controller to release personal data to a third party.

It should be noted that under the Freedom of Information Act (1997 and 2003) records containing personal information may be released to a third party in accordance with the Act.

Principles of the Acts

The Centre will administer its responsibilities under the legislation in accordance with the eight stated data protection principles outlined in the Act as follows:

  1. Obtain and process information fairly
    The Centre will obtain and process personal data fairly and in accordance with the fulfillment of its functions
  2. Keep data only for one or more specified, explicit and lawful purposes. The Centre will keep data for purposes that are specific, lawful and clearly stated and the data will only be processed in a manner compatible with these purposes
  3. Use and disclose data only in ways compatible with these purposes. The Centre will only disclose personal data that is necessary for the purpose/s or compatible with the purpose/s for which it collects and keeps the data
  4. Keep data safe and secure. The Centre will take appropriate security measures against unauthorised access to, or alteration, disclosure or destruction of, the data and against their accidental loss or destruction. The Centre is aware that high standards of security are essential for all personal data
  5. Keep data accurate, complete and up-to-date. The Centre will have procedures that are adequate to ensure high levels of data accuracy and will examine the general requirement to keep personal data up-to-date. Appropriate procedures will be put in place to assist staff in keeping data up-to-date.
  6. Ensure that data are adequate, relevant and not excessive. Personal data held by the Centre will be adequate, relevant and not excessive in relation to the purpose/s for which it is kept
  7. Retain data for no longer than is necessary for the purpose or purposes for which they are kept. The centre will implement a policy on retention periods for personal data
  8. Give a copy of his/her personal data to that individual, on request. The Centre will have procedures in place to ensure that data subjects can exercise their rights under the Data Protection legislation.

Roles/Responsibilities

The Family Resource Centre has overall responsibility for ensuring compliance with the Data Protection legislation. However, all employees of the Centre who collect and/or control the contents and use of personal data are also responsible for compliance with the Data Protection legislation. The Centre will provide support, assistance, advice and training as required in order to ensure that it is in full compliance with the legislation.

Procedures and Guidelines

This policy supports the provision of a structure to assist the Centre’s compliance with the Data Protection legislation, including the provision of best practice guidelines and procedures in relation to all aspects of Data Protection.

Review

This Policy will be reviewed regularly in light of any legislative or other relevant indicators by the Board of Management

reCAPTCHA

We use the reCAPTCHA service provided by Google LLC (Google) to protect your submissions via internet submission forms on this site. This plugin checks if you are a person in order to prevent certain website functions from being (ab)used by spam bots (particularly comments). This plugin query includes the sending of the IP address and possibly other data required by Google for the Google reCAPTCHA service. For this purpose your input will be communicated to and used by Google. However, your IP address is previously truncated by Google within member states of the European Union or in other states which are party to the agreement on the European Economic Area and is, as such, anonymized. Only in exceptional cases is a full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address provided by reCaptcha from your browser shall not be merged with any other data from Google.
This data collection is subject to the data protection regulations of Google (Google Inc.). For more information about Google’s privacy policy, please visit: https://policies.google.com/privacy?hl=en
By using the reCAPTCHA service, you consent to the processing of data about you by Google in the manner and for the purposes set out above.