The purpose of this privacy notice is to ensure personal data processed by the company is done so in a lawful, fair and transparent manner in relation to the data subject and that individuals are well informed about the collection and use of their personal data.
The Company is a data controller, meaning that it determines the processes to be used when using your personal data. Our contact details are as follows: Lee Cox, Managing Director, 01948 661400, or via email at dpo@springcare.org.uk
We process personal data for some or all of the following purposes depending on our relationship with the individual data subject:
We cannot achieve these purposes without processing personal data.
We will not use your personal data for anything other than for the purposes set out above and we will never sell your personal data to third parties or share it with third parties without telling your (see Recipients of personal data below).
In addition to the above purposes we must have a valid lawful basis in order to process your personal data.
Therefore we have identified the following lawful bases:
We have identified legitimate interests as the basis for the following processing activities; Fundraising and volunteering, the operation of our CCTV system the administration of basic first aid and vaccinations and to ensure we communicate effective and relevant information to the appropriate recipient/s.
The legitimate interests for fundraising and volunteering are very simple; to help us to raise funds for our resident comfort fund and to utilise volunteers who want to work with us.
The legitimate interest for operating our CCTV are; it will help us to maintain the security of our premises from intruders, prevent and investigate crime and maintain the health and safety of our Service Users, staff and visitors.
The legitimate interests for administering basic first aid and vaccinations are; to minimise injury or in some case maintain life and maintain the health and safety of our Service Users, staff and visitors.
The legitimate interest for effective and relevant communication are; to ensure the correct information is available to the correct recipient at the correct time and in the best interest of the data subject.
Sometimes the Company will need to collect personal data from sources other than the individual it relates to. These sources include:
The following list describes the categories of personal data the Company might collect from sources other than the individual it relates to:
There are times when we will need to share personal data with other organisations or third parties.
We will only do this in line with the purposes set out above and we will make sure appropriate steps are taken to protect the security of personal data before it is shared.
The Company shares personal data with the following organisations or third parties if and when required:
The retention period applied to personal data we process is defined in our Retention Policy which is available upon request.
The following individual rights may be available depending on the category of data being processed, the purpose and lawful base for the processing activity and the retention period applied:
For further information on these rights you can visit the Information Commissioners Office website at www.ico.org.uk
Any request to exercise the above rights should be made in writing and addressed to the Data Controller at Nicholson House, Shakespeare Way, Whitchurch Business Park, Whitchurch, Shropshire, SY13 1LJ.
You have the right to lodge a complaint or report a concern about organisations personal data processing activity at any time. You should do this by contacting the Information Commissioners Office.
There is both a statutory and contractual requirement for you to provide your personal data to the Company if you work for us or apply to work for us.
There is a statutory requirement for you to provide your personal data to the Company in order for us to deliver our service to you.
The Company does not apply any automated decision making to the personal data we process.