Southend YMCA Data Protection Policies
For more information on how Southend YMCA processes your particular data, please click on the link below that most closely resembles your relationship with Southend YMCA.
Data Subject: Recruitment Candidates
For the purpose of data protection legislation, including the UK Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), the UK Privacy and Electronic Communications Regulations 2003 (PECR), and other applicable legislation, the controller is:
​
Southend-on-Sea Young Men’s Christian Association (Southend YMCA) Registered Charity Number: 1102837 (registered in England); Limited Liability Company number 5051166; Non-profit, private registered provider of social housing: Number 4853.
​
Southend YMCA,
Newlands,
85 Ambleside Drive,
Southend On Sea,
Essex,
SS1
For queries to this notice please contact info@southendymca.org.uk
As potential employee of Southend YMCA, we hold the following information about you:
-
Contact details
-
CV
-
Date of Birth
-
Qualifications
-
References including DBS checks
-
Disability details
-
Name
This data may come directly from you, a third party or recruitment agency. We hold and process this data in our legitimate interest for the negotiation of a potential contract of employment with you.
If we are unable to process this data, we would not be able to process your application.
Certain data may be stored on servers outside the EEA. In this case your data is protected by the EU-US Privacy Shield Framework.
Should you be unsuccessful we will retain this data for up to 2 years so that we may contact you regarding any future opportunities, unless you request that we delete the data beforehand.
At the conclusion of all relevant retention periods, physical documents containing your personal data will be shredded, and all personal data held electronically will be deleted.
You have the qualified right to request: Access to and porting of your data; Rectification or erasure of the data; Restriction of processing or to object to the processing.
Changes to this notification
​
Any changes we may make to this notification in the future will be posted on this page and where appropriate notified to you by e-mail.
You also have a right to lodge a complaint with a Supervisory Authority, for example the Information Commissioner’s Office or http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080
Our Data Protection Officer can be contacted at dpo@priviness.eu
Young Persons Privacy Notice
-
What’s this about?A new law is being made that keeps your information safe – things like your date of birth, where you have lived, where you go or went to school. Southend YMCA and other people collect and use information for all kinds of reasons, and the new law tells them exactly what they are allowed to do with yours. We collect some information about you. It’s our job to tell you how we will collect the information, how we will record it and how we will use it. In this notice, you will see different names or terms used that you may not be familiar with, such as: Data controller: This person (or group of people, like Southend YMCA) is in charge of the information we collect. This can also be the Southend Borough Council. Data processor: This person processes information for the data controller. This can be someone outside Southend YMCA or Southend YMCA itself Data protection officer (DPO): This person makes sure we do everything the law says. Southend YMCA’ DPO is a company called Priviness. Personal data: This means any information that can be used to identify someone, such as their name, email address and date of birth, or any information that relates to you.
-
Who looks after your information?Southend YMCA is the data controller of the personal information you give us – we look at how and why your information is collected and used. Our details are - Southend-on-Sea Young Men’s Christian Association (Southend YMCA) Registered Charity Number: 1102837 (registered in England); Limited Liability Company number 5051166; Non-profit, private registered provider of social housing: Number 4853. ​ Southend YMCA, Newlands, 85 Ambleside Drive, Southend On Sea, Essex, SS1 Sometimes we have to give your information to other people, such as the government, but we will only give away your information when you say it’s ok or when the law says that we have to. When your data is given to someone else, they must look after it and keep it safe.
-
Why do we collect and use your information?We will only collect your information when we need it to help us do our job or to follow the law. When we’ve collected it, here’s how we use it: To support your care and or housing requirements To monitor and report on your progress To provide appropriate support To assess risk To assess the quality of our service To comply with the law regarding data sharing To inform and update court, local authority or statutory organisations
-
What information do we collect?The categories of information that Southend YMCA collects, holds and shares include the following: Your personal information This is things like your name and date of birth, identity details, contact details, criminal convictions, social requirements and financial details. Your characteristics This means information about you, like where you’re from, what language you speak your background. Your care needs This means information provided by your local authority about your care and support or housing needs and risks. Your assessment information We collect your assessment information and any test results when you sit a big test or exam or undertake a support assessment or document your progress with any of our activity programmes. Some of your medical information We keep information about any times you’ve been ill and any special conditions you have that we need to know about to keep you safe. We ask you to sign a consent form to give us access to your medical records or liaise with the Doctor on your behalf; this is to ensure your wellbeing and the wellbeing of others. Behavioural information We record the number of times there have been behavioural issues, what the reasons were and any consequences.
-
Do you have to give us your information?You must give us quite a lot of the information we need, but there is some information that you can choose whether to let us have it or not. When we ask you for information that you don’t have to give us, we will ask for your permission and let you know why we want it and what we will do with it. If you don’t want us to have this information, that’s your choice.
-
Are there some circumstances where I could be denied access to information about me?There are certain circumstances where we can withhold information about you, for example where the information might cause serious harm to your physical or mental health or to another individual. There are also certain circumstances where we can withhold information about you, for example where there are safeguarding concerns about you or another individual.
-
How long will we keep your information?We don’t keep it forever, only for as long as we need it to help us do the thing we needed it for. We have a policy that tells us when to keep it and when to bin it.
-
What are your rights?You have the right to: Be told how we use your information. Ask to see the information we hold. Ask us to change information you think is wrong. Ask us to only use your information in certain ways. Tell us you don’t want your information to be processed. Unless we have a legal reason to do so. If the information we are collecting is information that you can choose not to give, you can tell us to stop collecting it at any time. If you’re worried about how we get and use your information, you can speak to anyone at Southend YMCA, who will be able to help you and answer any questions that you have. If you want to speak to somebody not at Southend YMCA, you can call the people who look after information, called the Information Commissioner’s Office (ICO), on 0303 123 1113 or using their live chat. Or our Data Protection Officer can be contacted at dpo@priviness.eu
-
Four important things to understandNow you’ve read this, we hope you understand that: The law allows us to get and use your information to help us do our job. We may share your information with others, but only when we really need to. We will ask for your permission to share your information whenever you have a choice. You can tell us not to share your information, even when you have said yes before.
-
Would you like to know more?If you have any questions, we will be happy to help you.
-
Changes to this notificationAny changes we may make to this notification in the future will be posted on this page and where appropriate notified to you by e-mail. You also have a right to lodge a complaint with a Supervisory Authority, for example the Information Commissioner’s Office or http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080 Our Data Protection Officer can be contacted at dpo@priviness.eu
Data Subject: Supplier
For the purpose of data protection legislation, including the UK Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), the UK Privacy and Electronic Communications Regulations 2003 (PECR), and other applicable legislation, the controller is:
​
Southend-on-Sea Young Men’s Christian Association (Southend YMCA) Registered Charity Number: 1102837 (registered in England); Limited Liability Company number 5051166; Non-profit, private registered provider of social housing: Number 4853.
​
Southend YMCA,
Newlands,
85 Ambleside Drive,
Southend On Sea,
Essex,
SS1
For queries to this notice please contact info@southendymca.org.uk
As a supplier to Southend YMCA, we hold the following information about you:
-
Name
-
Contact details
-
Bank Details
We hold and process this data for the legitimate interest of fulfilling a business to business contract with your organisation or to satisfy and manage a contract with yourself.
If we are unable to process this data, we would not be able to continue with our contract with you.
We will retain this data for up to 7 years from termination of the contract in case there are any queries, unless you request that we delete the data beforehand. Any data relating financial transactions will be kept for 7 years to conform to our legal obligations under the Finance Act 1998.
​
At the conclusion of all relevant retention periods, physical documents containing your personal data will be shredded, and all personal data held electronically will be deleted.
You have the qualified right to request: Access to and porting of your data; Rectification or erasure of the data; Restriction of processing or to object to the processing.
Changes to this notification
​
Any changes we may make to this notification in the future will be posted on this page and where appropriate notified to you by e-mail.
You also have a right to lodge a complaint with a Supervisory Authority, for example the Information Commissioner’s Office or http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080
Our Data Protection Officer can be contacted at dpo@priviness.eu
Data Subject: Email Contacts
For the purpose of data protection legislation, including the UK Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), the UK Privacy and Electronic Communications Regulations 2003 (PECR), and other applicable legislation, the controller is:
​
Southend-on-Sea Young Men’s Christian Association (Southend YMCA) Registered Charity Number: 1102837 (registered in England); Limited Liability Company number 5051166; Non-profit, private registered provider of social housing: Number 4853.
​
Southend YMCA,
Newlands,
85 Ambleside Drive,
Southend On Sea,
Essex,
SS1
For queries to this notice please contact: info@southendymca.org.uk
As an email contact or prospective customer to Southend YMCA, we hold the following information about you:
​
-
Name
-
Contact details
-
Job title
-
Company
This data may come directly from yourself or from Data as a Service providers. We hold and process this data for the legitimate interest of communicating with you, either for standard business communications or for marketing and fundraising.
We will retain this data for up to 3 years from our last contact with you, unless you request that we delete the data beforehand.
​
At the conclusion of all relevant retention periods, physical documents containing your personal data will be shredded, and all personal data held electronically will be deleted.
You have the qualified right to request: Access to and porting of your data; Rectification or erasure of the data; Restriction of processing or to object to the processing.
Changes to this notification
​
Any changes we may make to this notification in the future will be posted on this page and where appropriate notified to you by e-mail.
You also have a right to lodge a complaint with a Supervisory Authority, for example the Information Commissioner’s Office or http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080
Our Data Protection Officer can be contacted at dpo@priviness.eu
Data Protection Privacy Notice
(Point of contact and family members)
Southend YMCA is the data controller. Our contact details are:
Southend-on-Sea Young Men’s Christian Association (Southend YMCA) Registered Charity Number: 1102837 (registered in England); Limited Liability Company number 5051166; Non-profit, private registered provider of social housing: Number 4853.
​
Southend YMCA,
Newlands,
85 Ambleside Drive,
Southend On Sea,
Essex,
SS1
For queries related to this notice please contact: info@southendymca.org.uk
As the point of contact, parent, guardian or family member of one of our young people, Southend YMCA process your contact details, DBS ID, medical, social media information and the nature of your relationship to the young person.
Our legal basis for holding and processing this information is our legitimate interest to provide care for our young people and to meet our legal obligations with regard to the services we offer such as housing and education, positive activities, support and advice.
​
We may also need to share some of the above categories of personal information with other parties, such as professional bodies associated to the young people in our care and who we work with. Usually, information will be anonymised, but this may not always be possible. The recipient of the information will be bound by confidentiality obligations. We may also be required to share some personal information with our regulators or as required to comply with the law.
As required by the law and statutory guidance with regard Health and Social Care Act 2008 we may retain records for up to 75 years to meet our obligations
You have the qualified right to request: access to your data, rectification or erasure of the data, restriction of processing or to object to the processing.
How to complain
​
You also have a right to lodge a complaint with a Supervisory Authority, for example the Information Commissioner’s Office or http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080
Our Data Protection Officer can be contacted at dpo@priviness.eu
Data Subject: Housing Visitors
For the purpose of data protection legislation, including the UK Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), the UK Privacy and Electronic Communications Regulations 2003 (PECR), and other applicable legislation, the controller is:
​
Southend-on-Sea Young Men’s Christian Association (Southend YMCA) Registered Charity Number: 1102837 (registered in England); Limited Liability Company number 5051166; Non-profit, private registered provider of social housing: Number 4853.
​
Southend YMCA,
Newlands,
85 Ambleside Drive,
Southend On Sea,
Essex,
SS1
For queries to this notice please contact info@southendymca.org.uk
As a visitor of Southend YMCA housing premises, we hold and collect the following information about you:
Name
Address
Contact details
Photographic Identification
Photo
This data may come directly from you or be generated by Southend YMCA
We hold and process this data in our legitimate interest. Each visitor will be photographed on entry to our premises and this will be processed under the legal basis of public task to protect the property of our charity and the people in our care, including discharge of obligations laid down by law, management, planning and health and safety.
We pass certain data on to third parties including local authorities and regulatory bodies and law enforcement when required.
We have a legal obligation to keep certain records related to your visit to our premises and may retain these records for 7 years from date of collection.
​
At the conclusion of all relevant retention periods, physical documents containing your personal data will be shredded, and all personal data held electronically will be deleted.
​
You have the qualified right to request: Access to and porting of your data; Rectification of the data; or to object to the processing.
Changes to this notification
​
Any changes we may make to this notification in the future will be posted on this page and where appropriate notified to you by e-mail.
You also have a right to lodge a complaint with a Supervisory Authority, for example the Information Commissioner’s Office or http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080
Our Data Protection Officer can be contacted at dpo@priviness.eu