{"id":610,"date":"2017-02-02T12:28:56","date_gmt":"2017-02-02T12:28:56","guid":{"rendered":"http:\/\/test.kriesi.at\/enfold-2017\/?page_id=610"},"modified":"2025-12-18T15:28:17","modified_gmt":"2025-12-18T15:28:17","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/adapt-ne.org.uk\/index.php\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<\/div><\/div><\/div><\/div><\/div>
\n

Data Collection and Privacy Policy<\/h2>
<\/div><\/div><\/div>\n
<\/span><\/span><\/div>\n
<\/div>

Document description<\/strong><\/p>\n

This document outlines our legal requirements under the General Data Protection Regulations and the processes for how Adapt (NE) meets them.<\/p>\n

Implementation and Quality Assurance<\/strong><\/p>\n

Implementation is immediate and this policy shall stay in force until any alterations are formally agreed.<\/p>\n

The policy will be reviewed every three years by the Board of Trustees, sooner if legislation, best practice or other circumstances indicate this is necessary.<\/p>\n

All aspects of this policy shall be open to review at any time. If you have any comments or suggestions on the content of this policy please contact Adapt (NE), Burn Lane, Hexham, Northumberland, NE46 3HN, 01434 600599.<\/p>\n

Introduction<\/strong><\/p>\n

Adapt (NE) is committed to providing a confidential service to its users. No information given to the organisation will be shared with any other organisation or individual without the user\u2019s expressed permission. Individuals with learning disabilities have the same right of control over information about themselves as others. The only limit is their ability to understand the issues involved. Where this is in question, any item of concern should be discussed with the Chief Executive Officer.<\/p>\n

For the purpose of this policy, confidentiality relates to the transmission of personal, sensitive or identifiable information about individuals or organisations (confidential information), which comes into the possession of the Adapt (NE) through its work.<\/p>\n

Adapt (NE) holds personal data about its board members, staff, volunteers, users, members, etc. which will only be used for the purposes for which it was gathered and will not be disclosed to anyone outside of the organisation without prior permission. There are two exceptions to this.<\/p>\n

The first exception is when it is felt that somebody (client or third party) is at risk of harm. In this circumstance, the information can be shared in line with the Protection of Children and Vulnerable Adults Policy.<\/p>\n

The second exception is when the law has been broken, as Adapt (NE) cannot be seen to be colluding after the fact. In this circumstance, the police should be informed. Initially the issue should be discussed with the Director, who will agree actions in relation to informing the police. Written records should be kept in relation to breaking confidentiality to protect someone from harm or because you have a legal duty to inform the police that a law has been broken.<\/p>\n

All personal data will be dealt with sensitively and in the strictest confidence internally and externally.<\/p>\n

The General Data Protection Regulation (GDPR) (Regulation (EU) 2016 \/ 679) is a regulation<\/a> by which the European Parliament<\/a>, the European Council<\/a> and the European Commission<\/a> intend to strengthen and unify data protection for individuals within the European Union<\/a> (EU). It also addresses the export of personal data outside the EU. The primary objectives of the GDPR are to give citizens back control of their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU. GDPR replaces the data protection directive (officially Directive 95 \/ 46 \/ EC)<\/a> \u00a0from 1995. The regulation was adopted on 27 April 2016 and applied from 25 May 2018, after a two-year transition period.<\/p>\n

The following guidance is not a definitive statement on the Regulations,but seeks to interpret relevant points where they affect Adapt (NE). The Regulations cover both written and computerised information and the individual\u2019s right to see such records. It is important to note that the regulations also cover records relating to staff and volunteers.<\/p>\n

All Adapt (NE) staff are required to follow this Data Protection Policy at all times. The Chief Executive Officer has overall responsibility for data protection within Adapt (NE) but each individual processing data is acting on the Chief Executive Officer\u2019s behalf and therefore has a legal obligation to adhere to the regulations.<\/p>\n

Definitions<\/strong><\/p>\n

Processing of information \u2013 how information is held and managed<\/p>\n

Information Commissioner \u2013 formerly known as the Data Protection Commissioner<\/p>\n

Notification \u2013 formerly known as Registration<\/p>\n

Data Subject \u2013 used to denote an individual about whom data is held<\/p>\n

Data Controller \u2013 used to denote the entity with overall responsibility for data collection and management. \u00a0Adapt (NE) is the Data Controller for the purposes of the Act<\/p>\n

Data Processor \u2013 an individual handling or processing data<\/p>\n

Personal data \u2013 any information which enables a person to be identified<\/p>\n

Special categories of personal data \u2013 information under the Regulations which requires the individual\u2019s explicit consent for it to be held by the charity<\/p>\n

Data Protection Principles<\/strong><\/p>\n

As data controller, Adapt (NE) is required to comply with the principles of good information handling.<\/p>\n

These principles require the Data Controller to:<\/p>\n

    \n
  1. Process personal data fairly<\/strong>, lawfully and in a transparent manner.<\/strong><\/li>\n
  2. Obtain personal data only for one or more specified<\/strong> and lawful purposes <\/strong>and to ensure that such data is not processed in a manner that is incompatible with the purpose or purposes for which it was obtained.<\/li>\n
  3. Ensure that personal data is adequate<\/strong>, relevant and not excessive <\/strong>for the purpose or purposes for which it is held.<\/li>\n
  4. Ensure that personal data is accurate <\/strong>and, where necessary, kept up-to-date.<\/strong><\/li>\n
  5. Ensure that personal data is not kept for any longer than is necessary for the purpose for which it was obtained.<\/li>\n
  6. Ensure that personal data is kept secure.<\/li>\n
  7. Ensure that personal data is not transferred to a country outside the European Economic Area unless the country to which it is sent ensures an adequate level of protection for the rights (in relation to the information) of the individuals to whom the personal data relates.<\/li>\n<\/ol>\n<\/div><\/section><\/div>

    Consent<\/strong><\/p>\n

    Adapt (NE) must record service users\u2019 explicit consent to storing certain information (known as \u2018personal data\u2019 or \u2018special categories of personal data\u2019) on file.<\/p>\n

    For the purposes of the Regulations, personal and special categories of personal data covers information relating to:<\/p>\n

      \n
    1. The racial or ethnic origin of the Data Subject<\/li>\n
    2. His \/ her political opinions<\/li>\n
    3. His \/ her religious beliefs or other beliefs of a similar nature<\/li>\n
    4. Whether he \/ she is a member of a trade union<\/li>\n
    5. His \/ her physical or mental health or condition<\/li>\n
    6. His \/ her sexual life<\/li>\n
    7. The commission or alleged commission by him \/ her of any offence<\/li>\n
    8. Online identifiers such as an IP address<\/li>\n
    9. Name and contact details<\/li>\n
    10. Genetic and \/ or biometric data which can be used to identify an individual<\/li>\n<\/ol>\n

      Special categories of personal information collected by Adapt (NE) will, in the main, relate to service users\u2019 disabilities (physical, learning disability, mental health, conditions), religious \/ spiritual beliefs, name, contact details and commission or alleged commission of any offence. Data is also collected on ethnicity and held confidentially for statistical purposes.<\/p>\n

      Consent is not required to store information that is not classed as special category of personal data, as long as only accurate data that is necessary for a service to be provided is recorded.<\/p>\n

      As a general rule Adapt (NE) will always seek consent where personal or special categories of personal information is to be held.<\/p>\n

      It should also be noted that where it is not reasonable to obtain consent at the time data is first recorded and the case remains open, retrospective consent should be sought at the earliest appropriate opportunity.<\/p>\n

      If personal and\/or special categories of personal data need to be recorded for the purpose of service provision and the service user refuses consent, the case should be referred to the Services Manager or Chief Executive Officer for advice.<\/p>\n

      Obtaining consent<\/strong><\/p>\n

      Consent may be obtained in a number of ways depending on the nature of the interview, and consent must be recorded on or maintained with the case records:<\/p>\n