Privacy Notice
Linc-Cymru Housing Association Limited trading as the Lysaght Institute ("we", "us", "our") complies with all aspects of the data protection laws, including UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations as amended and updated from time to time.
This Website and Links to Other Websites
This Privacy Notice only covers this website. If you leave this website, please read the privacy statements on the other websites that you visit. We use cookies on this website, therefore please read our cookie policy. For your own benefit and protection you should also read our terms of use and our acceptable use policy. If you do not understand any point, please ask us for further information.
Your Rights
Under the data protection laws, you have rights we need to make you aware of. You have the following rights depending on the legal basis for processing your information:
You have the right to ask us for copies of your personal information. Personal data is any information which on its own or when combined with other information identifies you as a living person. This right always applies. There are some exemptions, which means you may not always receive all the information we process. You can request your personal data by:
Post:
Lysaght Institute
Orb Drive
NEWPORT
NP19 0RA
Email: info@lysaght-institute.com
Telephone: 01633 284911
We may need further evidence of your identity, such as a valid photo ID driving licence or passport and a recent utility bill, bank statement or Council Tax bill showing your name and address.
- You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
- You have the right to ask us to erase (to be forgotten) your personal information in certain circumstances.
- You have the right to ask us to restrict the processing of your information in certain circumstances.
- You have the right to object to processing in certain circumstances
- You have the right to data portability, but this only applies to information you have given us and that is held electronically. This right only applies in certain circumstances.
- To have the right to complain to us if you feel that we have not protected your personal data in accordance with the data protection laws. If you are not satisfied with our response, you can refer your complaint onto the Information Commissioner’s Office (ICO). However, be aware that on their website (ico.org.uk/) they state “We will not usually investigate concerns where there has been an undue delay in bringing it to our attention. You should raise your concerns with us (ICO) within three months of your last meaningful contact with the organisation concerned”. You can contact the ICO by:
Post:
Information Commissioner’s Office – Wales
2nd Floor, Churchill House
Churchill Way
CARDIFF
CF10 2HH
Email: wales@ico.org.uk
Telephone: 0330 414 6421(in English or Welsh)
If we have processed your personal data based on your consent, such as our newsletter, you have the right to withdraw your consent at any time.
If we are processing your information for criminal law enforcement purposes, your rights are slightly different.
We are the Data Controller, therefore we determine the purposes and means of processing your personal data. Our ICO registration number is Z6152868 in the name of Linc-Cymru Housing Association Limited.
How and what personal information do we collect
When you visit this website:
- To complete the Contact webpage
- We collect information from the cookies about how you use our website. See our cookie policy
When you visit our premises, or when you telephone, email or contact us via our Contact Page, we will collect your personal information when you are:
- Applying for one of our services
- Applying for a job
- Making a complaint
- Allegations of anti-social behaviour
- Reporting a problem with our website.
- To minimise the risk of exposure to coronavirus
The information you give us may include your name, home address, e-mail address, date of birth, employment information, and in certain circumstances we may also have details of your health, which is a special category of data, which is personal information that is more sensitive and needing greater protection.
How will your personal information be used?
The personal information we collect allows us to:
- Meet legal, regulatory and compliance requirements.
- Communicate with you.
- Provide the products and services you have requested.
- Verify your identity and details of your payment method or credit card amount.
- Administer our website and provide customer services.
- Monitor and analyse the use of any account to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime.
- To investigate any complaints.
- Contact you about our services which we think might be of interest to you.
- To establish, exercise or defend our legal rights; and
- To otherwise carry out the day-to-day operations of our organisation efficiently
How Long Will We Hold Your Personal Information?
The length that we keep your personal information will depend on our legal and contractual obligations, and the timescale in which a claim can be made against us.
- The facilities that we provide include a bar, restaurant, indoor fitness areas and other indoor leisure facilities. It is for this reason that we must comply with the Health Protection (Coronavirus Restrictions) (Wales) Regulations 2020, as amended and updated from time to time (known as the Coronavirus Regulations). We must therefore collect and retain your personal information on entry to our premises for 21 days. There may be exceptional circumstances where the information may be required to be kept for a longer period, e.g. where police ask for information 20 days after collection.
- We will retain all Closed-Circuit Television(CCTV) recordings for a period of 30 days and automatically delete them thereafter.
- If you provide your contact details on this website, we will hold them for 2 months, unless you enter into a contract with us, or you ask us to remove them.
- If you enter into a contract with us, we will hold your personal information for 3 years after the completion of the provision of services by us to you.
- All accidents that have occurred on our premises will be retained (whichever is the greater) for 3 years from date that the record is created (or last record entered if in our accident log book); or 3 years after the injured parties 18th birthday.
- Where you have applied for a job with us and been unsuccessful, we hold this information for 6 months.
Who We Share Your Personal Information With?
We may share your personal information with any member of Linc-Cymru Housing Association, but it will be restricted on a “need to know” basis.
We will not share your personal information to third parties unless we are under a duty to disclose or share your personal data to comply with our legal or contractual obligations, or is necessary for the prevention and detection of crime or where we have your consent. This may include business partners, suppliers and sub-contractors for the performance of the contract that you enter into with us.
In order to comply with with the Coronavirus Regulations 2020, we may be requested by the local health authority to share certain data with them if a case of Coronavirus is traced back to Lysaght under the Welsh Governments ‘Test, Trace, Protect’ scheme. We will only share such data that is relevant and required by them (name and contact details). Once such data has entered the health authorities database, they then become the controller of that data and are responsible for it’s security.
We may sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
We do not routinely transfer any personal data outside the European Economic Area (EEA).
Where We Store Your Personal Information
All information you provide to us is stored on our UK based secure servers.