Privacy Notice
1. What is Personal Data?
Personal data is data about a living individual who can be identified from that data. The processing of personal data is governed by the EU General Data Protection Regulation (the “GDPR”) and the Data Protection Acts 1988-2018.
2. Who are we?
Rialto Development Association (RDA) is the data controller (contact details below). This means that RDA decides how your personal data is processed and for what purposes. RDA operates a number of projects that serve different client groups, and each project needs to process some personal data in order to provide services to you.
RDA is committed to protecting your privacy and we have appropriate policies and procedures in place to process and protect any personal data that we hold about you.
3. How do we process your data?
RDA complies with its obligations under the “GDPR” by using personal data only for specified, lawful purposes; by not collecting or retaining excessive amounts of data; by keeping personal data up to date; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
4. What is the legal basis for processing your personal data?
Depending on how and why you engage with RDA we may use your personal data for the purposes set out in the following table which also sets out the legal base(s) for processing your data:
Purpose Legal Basis
Provision of social care services to older people Consent (Article 6(1)(a)) GDPR
Provision of social care (Article 9(2)(h) GDPR)
Provision of services to young people Consent
Provision of social care
Provision of services to individuals and families affected by addiction Provision of social care
Vital interests of the data subject (Article (9(2)(c)
Recruitment and management of volunteers Consent
Engaging with professionals in the field of health and social care Consent
Provision of social care
Operation of a Community Employment Scheme Exercise of official authority vested in the Dept of Employment Affairs
and Social Protection (Article 6(1)(e)
Recruitment and employment of staff Performance of a contract (Article 6(1)(b)) GDPR
Engaging with people who are interested in RDA’s work Consent
RDA’s legitimate interests (Article 6(1)(f)
Administering and promoting RDA’s services, events, news and activities RDA’s legitimate interests
Rental of meeting rooms to individuals and voluntary groups Performance of a contract (Article 6(1)(b)) GDPR
5. Sharing your personal data
In certain circumstances, we need to share personal data in pursuit of our legitimate interests, for example the use of processors to manage communications, surveys or the secure storage of your data. We may also share your data with individuals or organisations who are engaged in providing similar services for the purpose of enhancing the services we offer.
6. International Transfer
All personal data is stored either within the European Economic Area or countries whose data protection regimes have been designated as adequate by the European Commission or, if stored elsewhere, such storage is subject to having approved, appropriate privacy safeguards in place.
7. How long do we keep your data?
We keep personal data only for periods set out in our Data Retention Schedule and do not maintain data for longer than is absolutely required for the purposes set out in the table above.
8. Your rights and your personal data
You have the following rights with respect to your personal data:
§ To access and request a copy of your personal data, which RDA and/or RDA projects hold about you.
§ To request your personal data is erased where it is no longer necessary or lawful for RDA to retain such data.
§ To request a restriction is placed on further processing of your personal data where there is a dispute in relation to the accuracy or processing
§ To request that RDA correct any personal data if it is found to be inaccurate, incomplete or out-of-date.
§ To object to the processing of personal data by RDA.
§ To request that RDA provide you with a copy of personal data that you have provided and, in certain circumstances, to transmit that data directly to another data controller.
You also have the right to lodge a complaint with the Data Protection Commission should you be unhappy about any aspect of RDA’s handling of your personal data or any request that you make of us.
9. Contact Details
To exercise all relevant rights or submit a query or a complaint please in the first instance contact the Centre Manager at:
Rialto Development Association,
St. Andrew's Community Centre,
468 South Circular Road,
Rialto, Dublin 8
D08 H51F
Tel: 01 - 453 0744 Email: centremanager@standrewsrialto.ie
10. Complaints
You have the right to make a complaint to the Data Protection Commission which you can contact by phone: 1800 437 737; via website www.dataprotection.ie or by writing to:
The Data Protection Commission,
21 Fitzwilliam Square South
D02 RD28