Personal Data
Under the EU’s General Data Protection Regulation (GDPR), personal data is
defined as “any information relating to an identified or identifiable natural person (data subject); by
reference to an identifier such as a name, an identification number, location data, an online
identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person”.
Who is the Data Controller?
A Data Controller is the individual or legal person who controls and is responsible for keeping and using personal data in paper or electronic files. We are the data controller as defined by relevant data protection laws and regulations.
Lawful Processing
The lawful bases for processing are set out in Article 6 of the GDPR. At least one of
these must apply whenever personal data is to be processed:
(a)Consent: you have given Mayanei Hayeshua clear consent for your personal data to be processed for a specific purpose.
(b) Contract: the processing is necessary for a contract you have with Mayanei Hayeshua, if Mayanei Hayeshua has asked you to take specific steps before entering into this contract.
(c) Legal obligation: the processing is necessary for Mayanei Hayeshua to comply with the law (not including contractual obligations).
(d) Vital interests: the processing is necessary to protect someone’s life.
(e)Public task: the processing is necessary for Mayanei Hayeshua to perform a task that is in the public interest or for its official functions, and the task or function has a clear basis in law.
(f)Legitimate interests: the processing is necessary for Mayanei Hayeshua legitimate interests, or the legitimate interests of a third party, unless there is a good reason to protect the
individual’s personal data that overrides those legitimate interests.
What are your rights in respect of your personal data?
- The right of access.
Information we may collect from you:
We may collect personal information from you in the following ways:
• When you make a phone call or send an
e-mail to seek information about our services;
• Recruitment and employment, including agents, suppliers and contractors;
• When you have donated to us via any method whether directly or indirectly;
• You have used our services or benefited from Mayanei Hayeshua including enrolment in our school, nursery or other programmes;
• Through our use of the Cookies on our website (please see the Cookies
section);
• Through your request for publications and other marketing materials;
• Through your request for information about our services and related topics
and events;
• Through your registration for events;
• Through you contacting us with enquiries and comments;
• Through ticket purchases;
• Through volunteering and event attendance;
• If you are a next of kin of our staff or service users we may have your data
given to us in that capacity.
If you take one of the steps mentioned above, we may collect and process personal information about you such as:
• Your name, address, email address and other contact information;
• Records of your correspondence with us, if you have contacted us;
• Health data;
• Protected characteristics;
• Disclosure and Barring Service clearance data;
• Interests;
• Donation history;
• Financial information;
• Details of your visit to the website;
• Multimedia files such as photographs and video footage;
• Information about your service user experiences and
• Any other information provided to us when you contacted us to apply for a place in our nursery or school, such as health information including details of disability and safeguarding necessities or other circumstantial
details.
Information others may share with us about you:
We never buy personal data from third parties or trade data with other charities.
However, there are times when we must report to our funders and regulators or other
relevant bodies how we have used our funds/budgets and in those circumstances, we will report your information either aggregately or anonymously.
Where we store your personal data:
The data that we collect from you will be processed at our servers in the UK. It may
also be processed by organisations operating in the EEA that Mayanei Hayeshua has instructed.
If personal data is transferred outside the UK or EEA to a country without a designated adequacy rating Mayanei Hayeshua will request the data subject’s consent before processing the data. Consent will not be sought where the processor’s binding corporate rules stipulate
that the data will be processed in accordance with GDPR.
Uses made of the information:
We will process any of your personal data, in accordance with our obligations under applicable data protection laws and regulations, for the following reasons: to provide you with the services you have requested; to comply with applicable laws and regulations; for
administrative purposes; to assess enquiries; and to provide you with information about us and our services. If, at any time, you do not wish to receive further information about us and our services, contact us at [email protected]
How long we keep your information:
We retain the personal data processed by us in a live environment for as long as is
considered necessary for the purpose(s) for which it was collected (including as required by
applicable law or regulations).
In addition, personal data may be securely archived with restricted access and other appropriate safeguards where there is a need to continue to retain it.
Disclosure of your information:
We may disclose your personal information to third parties if we are under a duty to
disclose or share your personal data in order to comply with any legal obligation, or in order to
enforce or apply any agreements; or to protect the rights, property, or safety of Mayanei Hayeshua, or others. This includes exchanging information with other organisations for the purposes of safeguarding or other statutory regulations we must comply with.
Accessing your Information:
You can request to see a copy of the information we hold about you. Please contact us at [email protected]. We will endeavour to action your request as quickly as possible.
IP Addresses:
Mayanei Hayeshua may collect information about your computer, including where available your IP address, operating system and browser type, for system administration. This is statistical data about our users’ browsing actions and patterns and does not identify any individual.
Cookies:
Mayanei Hayeshua website uses Cookies to record visits to the website. This helps us to improve the website and provide you with a good experience when you browse. Please see our Cookies Policy for more information.
Changes to Mayanei Hayeshua Privacy Policy:
This privacy policy was last updated on 1st November 2020. Mayanei Hayeshua reserves the right to vary this privacy policy from time to time. Such variations become effective on posting on this website. Your subsequent use of this website or submission of personal information will be deemed to signify your acceptance to the variations.
Contact:
Questions, comments and requests regarding this privacy policy should be addressed to [email protected].
We hope that you won’t ever need to, but if you do want to complain about our use ofpersonal data, please send an email with the details of your complaint to [email protected] and addressed to our Data Protection Officer, Steve Resnick. We will look into and respond to any complaints we receive. You also have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner’s Office (ICO). For further information on your rights and how to complain to the ICO, please refer to the ICO website https://ico.org.uk/concerns
Contact details
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113 (local rate)
