Hearth and Mind Privacy Notice
Hearth and Mind are committed to protecting your privacy and complying with the General Data Protection Regulations 2018. This Privacy Notice sets out the basis by which we collect, use and disclose the personal data of our employees / volunteers and mailing subscribers, as well as your rights in respect of such personal data.
This notice identifies:
the services to which the notice applies;
the data we collect;
how we collect the data;
what we do with this data;
how long we retain your personal data;
how we safeguard against the misuse of this data;
how you can control the personal data that you provide to Hearth and Mind;
how we use cookies and what type of cookies we use;
how to contact us;
how to make a complaint.
Privacy Notice Remit
This privacy notice applies to the operation of the Hearth and Mind website (https://www.hearthandmind.ie) in respect of the collection of website visitors’ personal data in order to provide access to Hearth and Mind website services, including restricted (member only) access. The privacy notice applies only to information collected through our website and not to information collected offline.
What personal information do we collect, why and what do we do with it?
We collect and process data for a variety of purposes which largely relates to the day to day administration and staffing of the Hearth and Mind and the provision of support and information to our members.
[Please note that our members operate as organisations and therefore do not technically come under the remit of the GDPR, however in some instances, members would provide us with personal data as contact information e.g. when the organisation may be run out of an individual’s own home.]
Examples of data that may be collected/processed in the above procedures include:
- Name
- Age
- Address
- Contact details (email, phone)
- PPS number
- Bank account details
- Details of family members / next of kin
- Photographs / video recording (at ICSH events etc)
- Criminal convictions / Garda Vetting
Some examples of where the Hearth and Mind collects, handles, manages, stores and/or processes data includes but is not limited to:
Performing accounting and other record-keeping functions
Applications for employment / volunteering opportunities with Hearth and Mind
Providing HR, payroll and pension administration services
Providing volunteer/intern administration
surveys or research
Undertaking criminal record vetting checks in particular for Hearth and Mind employees and also through the provision of a Garda vetting service for potential employees of our members.
Providing general information, updates, public relations and advocacy of the organisations activities via mailings (email, post)
The WordFence security plugin collects digital personal data that contains IP addresses from the site visitors, but this is only used to help protect this site against malicious attacks. It stores this data for 90 days unless there is still malicious activity for that data in which case it is kept until no longer malicious. You can find the WordFence privacy policy here.
Lawful grounds for processing personal data
Lawful grounds for processing personal data, as set out in Article 6 of the GDPR will be applied to each data set (as set out above), as applicable. The lawful grounds are as follows and at least one will be applied to each data set:
the consent of the individual;
performance of a contract;
compliance with a legal obligation;
necessary to protect the vital interests of a person;
necessary for the performance of a task carried out in the public interest;
legitimate interests of company/organisation (except where those interests are overridden by the interests or rights and freedoms of the data subject).
Processing means performing any operation or set of operations on personal data, including:
obtaining, recording or keeping data;
organising or altering the data;
retrieving, consulting or using the data;
disclosing the data to a third party (including publication); and
erasing or destroying the data.
How we use this information
We use the information we collect so that we can deliver our services to you. We use information to:
provide information and support services;
Recruit and employ staff / volunteers;
Provide HR, payroll and pension administration services;
Publications and eBulletins – we will send you general information about the Hearth and Mind’s work, relevant news and upcoming events.
Retention of Personal Data
Personal Data will be retained in line with the Hearth and Mind’s Data Retention Policy. If you wish to request a copy of this policy please do so in writing.
Sharing your information
We will not share your personal information without your consent, unless allowed by law. Examples of organisations we may share your information with, where appropriate, are:
IT support company;
Paper waste disposal companies (for appropriate disposal of data only);
HR company;
Payroll and pension companies.
Whenever we share your information, we will ensure that your personal information is handled under strictly controlled conditions and in accordance with the requirements of the GDPR. We will not transfer your personal data outside of the EEA without your explicit consent.
Control of your Personal Data
Under the General Data Protection Regulations individuals can find out if we hold any personal information by making an ‘access request’. If we do hold information about you, we will tell you what this is and let you have a copy of it. Under GDPR, you have the right to:
Information about how and why their personal data is being processed, how long it will be retained for and the right to obtain access to that personal data.
Have your access requests processed within 30 days of the request.
Receive this information free of charge
Have information corrected if it is inaccurate or incomplete
Request the deletion or removal of personal data where there is no longer a reason for the continued processing / storage of data and where consent is withdrawn
Restrict your personal data being processed further than was originally consented to
Object to direct marketing and scientific, historical or statistical processing
Lodge a complaint with the Data Protection Commissioner
If you wish to make an access request, please do so in writing (this can include email, text, social media contact) and we will respond to you in accordance with the above-mentioned rights.
Cookie Policy
The Hearth and Mind uses files called cookies that are saved by your web browser on your device as online identifiers to make the website work as expected. Hearth and Mind uses third party cookies (Google Analytics) that enable us to analyse how visitors use the Hearth and Mind website and to monitor website performance. We use the information collected by these cookies to improve the performance of the Hearth and Mind website and our services. For more information on how Google Analytics collects and processes your data, go to “How Google uses data when you use our partners’ sites or apps”, located at www.google.com/policies/privacy/partners.
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Google also sets a cookie when their content, such as Google Maps or YouTube Video, is embedded in the page.
For an overview of the cookies in use on this website, please check our cookie policy page.
Data Protection Contact
Email: info@hearthandmind.ie
Phone: 01 4241115
Address: Riversdale House, Ballyboden Road, Rathfarnham, Dublin D14 W7D0.
Making a Complaint
If you have any concerns regarding the security of the data that the ICSH holds on you, you can raise the matter with the relevant staff member as named above, however you can, if you wish, raise the matter directly with the Data Protection Commissioner; contact details as follows:
Telephone: +353 57 8684800 / 1890 252 231
E-mail: info@dataprotection.ie
Postal Address: Data Protection Commissioner, Canal House, Station Road, Portarlington, R32 AP23 Co. Laois