Privacy
Family Carers Ireland Privacy Policy
1.0 Purpose
Family Carers Ireland is committed to continuously enhancing its IT Systems. As a result, our policies and procedures are subject to regular change. Any such updates will be applied to the master copy of the policy and communicated via email to all users.
This policy defines how and why Family Carers Ireland collect, store, use and share personal information, your rights in relation to your personal information and how to contact us in the event you have a complaint.
This policy is mandatory, by using the Family Carers Ireland website, services and supports, users are automatically accepting the terms of this policy.
2.0 Scope
As Family Carers Ireland is a national organisation, this policy represents Family Carers Ireland’s national position and takes precedence over all policies and procedures, which are held at local level.
All exceptions to this policy must be authorised by the Head of Corporate Services. Exception requests must be submitted by email to the IT & Facilities department.
This policy refers to all official services and supports offered by Family Carers Ireland. This policy applies to:
This policy applies to:
- Family Carers Ireland staff
- Website users.
Under REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) you have the right to:
- information about the processing of your personal data
- obtain access to the personal data held about you the data subject
- ask for incorrect, inaccurate or incomplete personal data to be corrected
- request that personal data be erased when it’s no longer needed or if processing it is unlawful
- object to the processing of your personal data for marketing purposes
- request the restriction of the processing of your personal data in specific cases;
- receive your personal data in a machine-readable format and send it to another controller (‘data portability’)
- request that decisions based on automated processing concerning you or significantly affecting you and based on your personal data are made by natural persons, not only by computers. You also have the right in this case to express your point of view and to contest the decision.
3.0 Policies & Procedures
3.1 Who We Are?
Family Carers Ireland, Charity No: 10962 is committed to compliance with GDPR, which came into effect on May 25th 2018, in order to protect the rights of you the Data Subject.
Family Carers Ireland is regulated under the General Data Protection Regulation, which applies across the European Union and Family Carers Ireland is responsible as controller of that personal information for the purposes of those laws. For the purposes of Data Protection laws, Family Carers Ireland is the Data Controller of personal data covered by this policy.
3.2 What Personal Data We Collect?
Family Carers Ireland collects the following types of personal data, provided by you the data subject, for the following processing purposes:
- Fundraising
- Funding
- Carers Supports
- HSE Home Services Delivery
- Awareness Campaigns
- Training
- Carer Lobbying
- Invoicing
- Payments
- Grants
- DSP Application
- Research
3.3 Purposes and Lawful Basis:
Data protection law requires us to have a lawful basis for every use we make of your personal data. The table below sets out why we use your personal data and the lawful basis we rely on under Article 6 of the GDPR. Where we use special category data, such as information about your health or the health of the person you care for, we also rely on a condition under Article 9 of the GDPR and the Data Protection Act 2018.
|
Purpose |
What we use your personal data for |
Lawful basis |
|
Carers Supports |
Providing the information, advice, support groups, counselling, emergency care planning, young carer and other supports you ask us for, and keeping a record of the supports we provide. |
Our legitimate interests in supporting family carers in line with our charitable objects (Article 6(1)(f)). Where you tell us about your health or the health of the person you care for: your explicit consent (Article 9(2)(a)). |
|
HSE Home Services Delivery |
Assessing, planning, scheduling and delivering home support and other services we provide on behalf of the HSE, and reporting to the HSE as our service arrangement requires. |
Performance of a task carried out in the public interest (Article 6(1)(e)), where we deliver services on behalf of the HSE under the Health Act 2004, together with section 38 of the Data Protection Act 2018. Health information: the provision of health or social care (Article 9(2)(h)) and section 52 of the Data Protection Act 2018. |
|
Membership |
Managing your membership, sending you membership information and processing membership payments through Stripe. |
Performance of a contract with you (Article 6(1)(b)). |
|
Fundraising |
Processing your donation and keeping a record of it; claiming tax relief on eligible donations; sending you fundraising appeals by post; and sending appeals by email, SMS or phone where you have agreed to this. |
Performance of a contract to process your donation (Article 6(1)(b)). Legal obligation to keep records for tax relief under the Charitable Donation Scheme, section 848A of the Taxes Consolidation Act 1997 (Article 6(1)(c)). Our legitimate interests in raising funds for our charitable work, for appeals by post (Article 6(1)(f)). Your consent for appeals by email, SMS or phone (Article 6(1)(a) and the ePrivacy Regulations, S.I. No. 336 of 2011). |
|
Funding |
Applying for, managing and reporting on funding from statutory bodies, trusts, foundations and corporate partners. Reports to funders normally contain anonymised or aggregated information only. |
Our legitimate interests in securing and accounting for the funding that pays for our services (Article 6(1)(f)). |
|
Grants |
Assessing and administering applications for grants and other financial supports that we provide or administer for family carers. |
Steps taken at your request to assess your application, and administering the grant (Article 6(1)(b)). Where your application includes health information: your explicit consent (Article 9(2)(a)). |
|
Awareness Campaigns |
Sharing carers’ stories, photographs and case studies in the media, on social media and in public campaigns, and sending campaign updates. |
Our legitimate interests in recording and telling the story of Family Carers Ireland and of family caring in Ireland, and in learning from it for the future (Article 6(1)(f)). |
|
Carer Lobbying |
Gathering carers’ views through consultations and surveys to inform policy submissions, pre-Budget submissions and engagement with government and public representatives. |
Our legitimate interests in advocating for family carers (Article 6(1)(f)). Your views are published anonymously unless you agree otherwise. |
|
Training |
Registering you for and delivering training, recording attendance and results, and issuing certificates. |
Performance of a contract with you (Article 6(1)(b)). Legal obligation where a course is accredited and the Qualifications and Quality Assurance (Education and Training) Act 2012 applies (Article 6(1)(c)). |
|
Invoicing and Payments |
Issuing invoices, processing payments and refunds, and keeping financial records. |
Performance of a contract (Article 6(1)(b)). Legal obligation to keep accounting and tax records, including under the Companies Act 2014 and section 886 of the Taxes Consolidation Act 1997 (Article 6(1)(c)). |
|
Research |
Carrying out research into the experiences and needs of family carers, through surveys, interviews and focus groups. |
Our legitimate interests in understanding and improving the lives of family carers, where research uses anonymised data (Article 6(1)(f)). Your consent where you take part in research in which you can be identified (Article 6(1)(a)), and your explicit consent for health information (Article 9(2)(a)), including under the Health Research Regulations 2018 where they apply. |
|
Stakeholder surveys and the 40th anniversary impact report |
Inviting people who have been part of our story, including carers, members, volunteers, current and former staff, board members and partners, to share memories and reflections; analysing responses; following up with respondents who agree; and preparing our 40th anniversary impact report, related publications, communications and celebrations. |
Our legitimate interests in recording and telling the story of Family Carers Ireland and of family caring in Ireland, and in learning from it for the future (Article 6(1)(f)). We only use your name or quote you by name where you tell us in the survey that you are happy for us to do so. Otherwise your contribution is used without identifying you. We do not ask for health information in our surveys. If you include it, we will not publish it in a way that identifies anyone. If you give us the details of another person who might contribute, we will contact them once to invite them to take part and tell them how we got their details. |
|
Website |
Operating and securing our website, managing user accounts, and using cookies. |
Our legitimate interests in running a secure and functioning website (Article 6(1)(f)). Your consent for non-essential cookies (Regulation 5 of the ePrivacy Regulations, S.I. No. 336 of 2011). |
|
Safeguarding and vetting |
Garda vetting of staff and volunteers who work with children or vulnerable persons, and responding to safeguarding concerns. |
Legal obligation under the National Vetting Bureau (Children and Vulnerable Persons) Acts 2012 to 2016 and the Children First Act 2015 (Article 6(1)(c)). Vital interests, where someone is at risk of serious harm (Article 6(1)(d)). Information about criminal convictions is processed as permitted by Article 10 GDPR and section 55 of the Data Protection Act 2018. |
|
Legal and regulatory compliance |
Meeting our obligations under charity, company and employment law, responding to regulators, and establishing or defending legal claims. |
Legal obligation, including under the Charities Act 2009 and the Companies Act 2014 (Article 6(1)(c)). Our legitimate interests in establishing, exercising or defending legal claims (Article 6(1)(f)), and Article 9(2)(f) where special category data is involved. |
Legitimate interests: Where we rely on our legitimate interests, we have assessed that those interests are not overridden by your rights and freedoms. You can ask us for a copy of the relevant assessment. You have the right to object at any time to processing based on our legitimate interests (Article 21 GDPR) by contacting dpo@familycarers.ie. We will then stop, unless we have compelling legitimate grounds that override your interests or we need the information to establish, exercise or defend legal claims.
Consent: Where we rely on your consent, you can withdraw it at any time by contacting dpo@familycarers.ie or using the unsubscribe option in our communications. Withdrawing consent does not affect anything we did with your consent before you withdrew it.
New purposes: If we want to use your personal data for a purpose not described here, we will only do so if it is compatible with the purpose for which we collected it, or with your consent, and we will tell you before we do.
Staff and volunteers: How we use the personal data of our staff and volunteers is described in our separate staff and volunteer privacy notices.
3.4 How We Collect Your Personal Data?
Family Carers Ireland collects data from the following sources:
- You provide it to Family Carers Ireland voluntarily
- Information from your use of our supports and services
- Information collected from our Website
- Information provided by third parties to Family Carers Ireland
Family Carers Ireland will use your contact details to communicate with you. Family Carers Ireland may use your information to send you news and latest updates about Family Carers Ireland supports, events and services in line with your contact preferences. Family Carers Ireland may contact you by post, email, telephone and SMS for these purposes as specified in your preferences on sign up to the organisation.
Your information will be used by all Family Carers Ireland departments, in line with the purpose for which you agreed to receive information and may also be anonymised and used for statistical and funding purposes.
3.5 Securing Your Personal Data:
Family Carers Ireland are committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, Family Carers Ireland have put in place suitable physical, electronic and managerial procedures to safeguard and secure the personal information Family Carers Ireland collect.
The information you provide to us is stored on secure servers. Family Carers Ireland use Stripe to process membership payments via our website, which are PCI compliant. Where Family Carers Ireland have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. Family Carers Ireland ask you not to share your password with anyone.
3.6 Retention of Your Personal Data:
Family Carers Ireland will not retain your Personal Data longer than necessary to fulfil the purpose for which it was obtained. Family Carers Ireland may be required by applicable laws and/or regulations to hold your personal data longer than this period. Family Carers Ireland implements security measures to ensure the personal data they collect, store and process is protected against unauthorised access, modification, disclosure or deletion.
3.7 Enforcing Your Data Protection Rights:
You can exercise your data protection rights at any time by contacting Family Carers Ireland via email at dpo@familycarers.ie or in writing at: Mary Multaney, Data Protection Officer, Family Carers Ireland, Market Square, Tullamore, Co Offaly.
Please note there is no fee for this service and in line with GDPR, Family Carers Ireland will respond to you within one calendar month of receipt of the request. You will be required to provide legal proof of your identify and proof of address (for example passport or driver’s license and utility bill).
You have the right to object to the processing of your data and Family Carers Ireland will respect that right, but may need to continue to process your data where processing is necessary for the performance of a contract or for compliance with a legal obligation, to which Family Carers Ireland as data controller is subject to.
3.8 Making a Subject Access Request:
You have the right to obtain access to the personal data held about you by Family Carers Ireland. You may make this request by post or email and Family Carers Ireland will respond by the same channel by which you have made the request. To make a Subject Access Request please ensure the following is included:
- Full name and address
- Proof of Identification and proof of address
- Signed application
- Application provides enough information to identify the data that is being requested
Family Carers Ireland will respond to you within one calendar month. If this is your first request, no fee is required. You will be asked to provide proof of your identify/address so that we can ensure we are providing data to the natural person making the request.
If you have any requests concerning your personal information or any queries with regard to our processing, please contact Family Carers Ireland's DPO at dpo@familycarers.ie.
4.0 Review & Update
This policy will be reviewed and updated regularly to ensure any changes to the Family Carers Ireland’s organisation or business practices are properly reflected or to include any additions/amendments to regulations.