Privacy Statement

Identity

Who are we?

ICON delivers a comprehensive range of community development initiatives and activities across Dublin’s north east inner city. We receive funding from a number of government departments and statutory agencies.

Our data protection contact is:

Sian Muldowney, ICON Coordinator, 22 Lower Buckingham Street, Dublin 1
Email: sian@iconnetwork.ie
Phone: 01 8366890

What information do we collect?

What PERSONAL information do we collect from you?

You may give us personal data by:

• Corresponding with us by phone, e-mail or otherwise.  We ask you to disclose only information necessary to provide you with information about our organisation’s work or services.

• Applying to work with us. The type of information you may provide in your CV, a cover letter, your name, address, e-mail address and phone number. CVs should include information relevant to your employment history and education (degrees obtained, places worked, positions held, relevant awards, and so forth). We ask that you do not disclose sensitive personal information (e.g. gender, height, weight, medical information, religion, philosophical or political beliefs, financial data) in your application.

• If you work in our organisation as an employee, we collect further information as part of a contract of employment and provision of those services to us as employer;

• Supplier information when we engage services from you such as email address and contact details;

• Engaging with the services and programmes provided by ICON delivered under various programmes including the SICAP programme. The SICAP programme delivers services in the following areas:

  • Children and families

  • Disadvantaged young people (15-24)

  • Disadvantaged women

  • Lone parents

  • Low income households and workers

  • New communities

  • People with disabilities

  • Travellers

  • Roma

  • Unemployed

  • Disengaged and economically inactive

The information collected may include/includes:

• Contact details (first name, last name, address, Eircode, email, home number and mobile)

• Non-official address

• Date of registration meeting to engage with our services

• Gender

• Date of birth

• PPSN (not compulsory, provided voluntarily)

• Age band 15 to 65

• Principal economic status (including economically inactive)

• Employment type

• Education level

• Nationality

• Gender

• Ethnicity and cultural background

• Disabilities and illness

• Target group

• New communities

• Ethnic / cultural background

• Household situation (financial and job situation)

• Supports

• Personal action plan

• Record of your activity with engagement with services

• Survey and evaluation information

Why do we collect this information?

We collect the information in order to provide you with relevant, appropriate and individually tailored local services, programmes and activities, to provide follow on services, to improve, evaluate and manage our work, to recruit staff, to administer HR related matters (e.g. payroll), to pay our suppliers and to meet our legal and funding requirements.

We will use this information:

• To create a profile for you if you are a prospective employee or enter into a contract for the provision of employment services;

• To administer and improve our activities and for internal operations, including troubleshooting, data analysis, testing, research & evaluation, statistical and survey purposes;

• To pay suppliers for their services;

• As part of our efforts to keep our site safe and secure;

• Registering you to avail of funded programmes and SICAP services;

• Advocacy;

• Internal and national reporting obligations.

The legal bases for the processing of your personal data are:

• Processing necessary for the performance of a contract which you have entered into with us or to take steps at your request prior to entering into a contract;

• Processing necessary for compliance with a legal obligation to which we are subject;

• That you have provided consent for the processing for one or more specified purposes;

• Processing necessary for the purposes of the legitimate interests where such interests are not overridden by your interests or fundamental rights or freedoms which require the protection of your information.

The legal bases for the processing of your special category or sensitive data are:

• Processing necessary for the performance of a contract which you have entered into with us or to take steps at your request prior to entering into a contract;

• Processing necessary for compliance with a legal obligation to which we are subject.

• In the case of SICAP services where you have given us explicit consent to process your information in order to deliver appropriate services to you.

Third party access to your data

Who Do we share this information with?

We may share your personal data with our selected business associates/ suppliers and contractors when and where necessary to provide you with our services and to provide those services in a professional appropriate manner. For example, these business partners may include our web hosting provider, our payroll provider (regarding employee information), our programme monitoring quality & control provider and our IT service providers.

In addition, we may be legally obliged to disclose your personal information to third parties:

• The Department of Rural and Community Development, POBAL and Dublin City Council for auditing purposes in relation to the expenditure of public money;

• Department of Employment Affairs & Social Protection;

• Local government agencies;

• Dublin Inner City Community Cooperative (channel of funding for the SICAP and the ICCSP).

• If we are under a duty to disclose or share your information in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect our rights, property, or safety, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Disclosure of your information

We may also share your information with selected third parties including:

• Government agencies and expenditure oversight agencies;

• Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you.

We attach at Schedule 1 a list of all entities with whom your personal data may be shared with under the circumstances listed above.

Minimisation

How long do we keep hold of your information?

The time periods for which we retain your information depends on the type of information and the purposes for which we use it. We will keep your information for no longer than is required or legally permitted.

Personal data and sensitive personal data collected by us for the SICAP programme is subject to a European Audit and therefore EU retention limits apply.

For further information on the periods for which your personal data is kept, please contact us directly.

Transfers

Do We transfer your information Outside The European Union or European Economic Area?

In general we do not transfer your information outside the European Union or European Economic Area.

The data that we collect from you may very occasionally and in very limited circumstances be transferred to, and stored in the United States or outside the European Economic Area (“EEA”) for which there is currently the EU-US Privacy Shield certified programme. For example, if you provide us with data related to Survey Monkey surveys which Dublin City Community Cooperative occasionally conducts this data may be retained in Cloud systems where storage may be controlled from the US or outside the EEA.

Your Rights

What are your rights with respect to your personal data?

You have the following rights:

• The right to access the personal data we hold about you.

• The right to require us to rectify any inaccurate personal data about you without undue delay.

• The right to have us erase any personal data we hold about you in circumstances such as where it is no longer necessary for us to hold the personal data or, in some circumstances, if you have withdrawn your consent to the processing.

• The right to object to us processing personal data about you such as processing for profiling or direct marketing.

• The right to ask us to provide your personal data to you in a portable format or, where technically feasible, for us to port that personal data to another provider provided it does not result in a disclosure of personal data relating to other people.

• The right to request a restriction of the processing of your personal data.

Where our processing of your personal data is based on your consent to that processing, you have the right to withdraw that consent at any time but any processing that we have carried out before you withdrew your consent remains lawful.

You may exercise any of the above rights by contacting our Data Protection Contact person, Sian Muldowney, sian@iconnetwork.ie

You may lodge a complaint with your local supervisory authority with respect to our processing of your personal data. The local Supervisory Authority in Ireland is the Data Protection Commissioner. The website is www.dataprotection.ie.

Changes to this policy

What will happen if we change our privacy notice?

This notice may change from time to time, and any changes will be posted on our site and will be effective when posted. Please review this notice each time you use our site or our services. This notice was last updated on 24^th May 2018.

Contacts

How can you contact us?

Our Data Protection Contact, Sian Muldowney, can be contacted as follows:

• By phone: 01 8366890
• Address: 22 Lower Buckingham Street, Dublin 1
• Contct form: On our website
• Or by email: sian@iconnetwork.ie

Schedule 1

We have set out below a list of third parties with whom we may share your data where we are obliged to do so: