Privacy Statement

This Privacy Statement applies to the processing of personal data provided by donors, volunteers, action starters, participants, and relations (hereinafter: Personal Data).  It also applies to data obtained from visits to and the use of Northern Ireland Chest Heart and Stroke’s website.  Northern Ireland Chest Heart and Stroke is the owner of this website and of the data obtained through it as such Northern Ireland Chest Heart and Stroke shall determine the purposes for which the data are processed. Northern Ireland Chest Heart and Stroke is the 'Data Controller' within the meaning of the General Data Protection Regulation (GDPR).

Personal data.

All data that identifies a natural person ("personal data") shall be handled with the greatest of care by Northern Ireland Chest Heart and Stroke. Northern Ireland Chest Heart and Stroke and its data processor IRaiser shall comply with the obligations as laid out in the Data Protection Act 2018. Northern Ireland Chest Heart and Stroke shall always be the 'Controller', and IRaiser the 'Processor' within the meaning of article 4 paragraph of the Data Protection Act 2018. Northern Ireland Chest Heart and Stroke and IRaiser will have full access to your data. Your data shall not be shared with or made available to third parties, unless required to legally process your data or Northern Ireland Chest Heart and Stroke is obliged to do so under the law, a court order, or an official command. When you visit the website, start an action page, log into a social media profile or email address, or donate, your data are stored. Northern Ireland Chest Heart and Stroke and IRaiser use your data to support or carry out your fund-raising action, registration of participation in events, processing of donations, and to inform you about activities and works, or to ask for your support.

 If you do not wish to receive information from Northern Ireland Chest Heart and Stroke, or if you want to object to the processing of your personal data, please contact us at supportercare@nichs.org.uk       You can also opt out from receiving newsletters and marketing emails by clicking the link you will find at the bottom of every email.

Northern Ireland Chest Heart and Stroke and IRaiser undertake to prevent defects of this website as far as possible and to remedy any defects as soon as possible. For the provision of its services, IRaiser relies on third parties, such as hosting and payment providers (Stripe), and the interfaces (API) of social networks.

Northern Ireland Chest Heart and Stroke and IRaiser offer no warranty about the functioning and the service provision of this website and reserve the right to modify or expand the service. Northern Ireland Chest Heart and Stroke and IRaiser are not liable for direct or indirect damage of any kind resulting from the use of the website of any information provided on the website, including damage to or loss of data and damage to equipment or programmes.

Cookies

Cookies are an essential part of surfing the web. Cookies are small bits of information stored on your computer by your browser. Cookies are used to recognize your visits and offer personalized content. Cookies are also used to obtain statistical information. With regard to placing cookies, Northern Ireland Chest Heart and Stroke and IRaiser act in accordance with the Privacy and Electronic Communications (EC Directive) Regulations 2003.

Cookie Statement.

Removing content

Northern Ireland Chest Heart and Stroke reserves the right to remove inappropriate or copyrighted information placed on the website by users, partly or completely, without prior notice and without being liable to pay any kind of damages.

Copyright

Northern Ireland Chest Heart and Stroke shall make its best effort to respect the rights to texts, photographs, illustrations, maps, other graphic material, (trade) names, brands, logos, and databases. The copyrights, brand rights, and/or other intellectual property rights to the protected material rest with the company that uses this material or right. In case photographs, illustrations, etc. are uploaded to Northern Ireland Chest Heart and Stroke by an action starter, participant, or project manager, that action starter, participant, or project manager guarantees that the copyrights or third parties to that material are respected. The action starter, participant, or project manager indemnifies Northern Ireland Chest Heart and Stroke against third party claims related to any violation of copyrights.

Purpose of the processing of your Personal Data

Through its website Northern Ireland Chest Heart and Stroke processes (personal) data for the following purposes:

• Creating and managing a personal fundraising page and the realization and execution of sponsoring, gifts, donorship, or crowdfunding.
  Northern Ireland Chest Heart and Stroke stores data such as your name, address, phone number, email address gender, contact preferences, tax status if provided,   data related to transactions or donations, participation data, the personal fundraising page or data that are relevant in case you and Northern Ireland Chest Heart and Stroke enter into an agreement, or you contribute financially to Northern Ireland Chest Heart and Stroke's objectives as a sponsor, donor, collector, action starter, or participant to actions or events.
• Notifications about activities.
  Northern Ireland Chest Heart and Stroke shall keep sponsors, donors, benefactors, action starters, participants, volunteers, 'friends', and other interested parties informed about its activities by sending them emails, provided you have given permission for this. Northern Ireland Chest Heart and Stroke shall always ask consent before processing your personal data. Northern Ireland Chest Heart and Stroke may also ask for your (financial) support through emailing.
• Optimising the website and emails.
  To optimise the content of our emails, the open and click ratio of emails can be monitored and recorded at an individual level. Northern Ireland Chest Heart and Stroke does this to keep its messages as interesting as possible for the receiver.
• Improving the services.
  In some cases, Northern Ireland Chest Heart and Stroke uses the email addresses of donors, sponsors, action starters, participants of events, and relations for research to improve the services.
  
  
• Social media advertising possibilities.
  To show you specific posts and advertisements, Northern Ireland Chest Heart and Stroke may use the options offered by social media platforms, such as Facebook, to advertise their services. Northern Ireland Chest Heart and Stroke uses Facebook's email list custom audiences to reach or exclude specific target groups. Northern Ireland Chest Heart and Stroke creates a Custom Audience by uploading the email addresses of its members/donors to an advertising tool. This group can then be linked to or excluded from a specific Facebook campaign. Northern Ireland Chest Heart and Stroke uses the Facebook pixel to measure the effectiveness of advertisements.
• You can opt out from receiving advertisements or change your preferences, through the privacy settings of the social media platform, e.g. Facebook.

Method for processing your Personal Data.

Northern Ireland Chest Heart and Stroke collects (and therefore processes) personal data through different forms on this website. When you sign up for participation in an event, or start, or sponsor an action, become a donor, or donate, Northern Ireland Chest Heart and Stroke may ask you for your personal data. Northern Ireland Chest Heart and Stroke also does this if you sign up to  receive marketing information,  newsletters, request information, ask information about activities, ask a question, or respond to the website. This is how Northern Ireland Chest Heart and Stroke keeps its database up to date.

If a person under 18 leaves their personal data on the website Northern Ireland Chest Heart and Stroke, shall verify if these data were provided with a parent's or guardian's consent, as far as possible with the technical means available. If such consent is missing, Northern Ireland Chest Heart and Stroke shall not process the personal data.

Security of your Personal data.

Northern Ireland Chest Heart and Stroke has taken appropriate physical, technical, and organisational measures for the protection of your personal data. Through its approved processor IRaiser, Northern Ireland Chest Heart and Stroke uses a secure server that can only be accessed by authorised persons. Any data you upload to online forms, is sent with encryption. Data of participants, action starters, sponsors, donors, relations, volunteers, friends, and other interested parties are stored on secure systems.

Storage period of your Personal Data.

Northern Ireland Chest Heart & Stroke shall not store your data for any longer than is necessary to achieve the objectives referred to in this Privacy Statement or to comply with relevant financial legislation.

Payment

For realising and processing sponsoring, support payments, gifts, donations, and crowdfunding, Northern Ireland Chest Heart and Stroke has partnered with Stripe to securely process payments between the donation platform and your bank or credit card provider.  The payment, and your name and address (if provided) information is shared with Northern Ireland Chest Heart & Stroke for identification and recording of any payments you make.    Stripe is a world class, international processing platform.   For further information visit -  https://stripe.com/gb

Your data at action starters, participants, and project managers.

In case you donate or sponsor a gift or participate in a crowdfunding action (e.g. a once-only donation or contribution to a crowdfunding project or other action), the action starter/participant you sponsor or the project manager of the crowdfunding action you donate to, has access to your contact details and your donation. In that case, your data shall be used only to inform the action starter, participant, or project manager, to sent you a thank-you note, or to keep you informed about a campaign or action. Your data shall not be shared with third parties. You may object to the processing of your data by Northern Ireland Chest Heart and Stroke. The provisions are fully applicable to this processing of your personal data.

Your rights

Northern Ireland Chest Heart and Stroke and any processors hired by us shall respect your rights under UK GDPR law. You can always access the data processed by Northern Ireland Chest Heart and Stroke and have them altered or erased, free of charge. If you have a log-in account for this website, the dashboard will give you an overview of your personal data stored for the use of this website once you are logged in. Through the dashboard, you can request eraser of these data. If you do not have a log-in account, you can contact us to obtain access, or have the data altered or erased at supportercare@nichs.org.uk

If wished, you can also receive your data in a machine-readable format (through a link you can use to download those data), for example to send them to another organisation. You can also object to receiving specific information about the services that Northern Ireland Chest Heart and Stroke sends you by email, telephone, mail, and/or SMS. To request a copy of your data or to object to the processing of your personal data, please contact Northern Ireland Chest Heart and Stroke via the following email address: supportercare@nichs.org.uk - Any other questions you might have regarding the processing of your personal data may also be sent to the aforementioned email address.

If you request Northern Ireland Chest Heart and Stroke to erase your personal data from its database, Northern Ireland Chest Heart and Stroke shall respond to your request proportionally. In some cases, your request for the complete erasure of your personal data may not be granted fully, for example the Inland Revenue requires that financial data be kept for 7 years. 

In the event you ask Northern Ireland Chest Heart and Stroke to stop contacting you for marketing purposes, Northern Ireland Chest Heart and Stroke will suppress your personal data as soon as possible but always within 28 days.    We will erase any data we hold on you after 7 years, or sooner if we do not hold any financial transaction details.

Data Protection Authority

Northern Ireland Chest Heart and Stroke will gladly help you if you have any complaint about the way we process your personal data. Under the privacy legislation, you have the right to lodge a complaint about the way Northern Ireland Chest Heart and Stroke processes your personal data with the ICO. However, we would ask that you always contact us first to resolve any issues.  You can contact the ICO at https://ico.org.uk/

Any questions?

If you have any questions regarding our Privacy Statement, please contact us at supportercare@nichs.org.uk 

To read our privacy policies in full please visit  https://nichs.org.uk/privacy-policy

Northern Ireland Chest Heart and Stroke reserves the right to change this Privacy Statement. We recommend that you check this Privacy Statement for changes regularly to stay informed.