In this statement we use the terms “OCF”, “we”, “our” and “us” to refer to the Oesophageal Cancer Fund, which is a registered charity (registration number 14542) and our registered office is at 2 Granville Road, Blackrock, Co Dublin, Ireland. Our principal place of business is also at 2 Granville Road, Blackrock, Co Dublin, Ireland.
OCF is the controller responsible for the personal information it collects, uses and stores about you
Personal information is any information that allows us to identify you. This could include information such as your name, postal address, telephone number, email address or date of birth.
We may collect your personal information when you make an enquiry, volunteer for an event or campaign, place an order, make a donation, access our services or subscribe to our newsletter.
Under data protection law we are only permitted to use your personal information if we have a legal basis for doing so. We rely on the following legal bases to use your information:
We may use your information in order to enter into a contract with you or to provide you with a service that you have requested from us.
We are required to use your personal information to comply with certain legal and regulatory obligations to which we are subject.
We may use your personal information for the purposes of carrying out activities that are in our legitimate interests (or those of a third party). When we use your personal information in this way, we ensure that there is a fair balance between our legitimate interest and your fundamental rights and freedoms.
In more limited circumstances we may also rely on the following legal bases:
We may send you details about our upcoming fundraisers, events and campaigns by post, text, email and/or phone from time to time where you have consented to us contacting you in this way. You can withdraw this consent at any time by contacting us using the details in section 9 below.
Set out below are some of the types of personal information that we may collect, use and store about you and the reasons for doing so.
|Information type||Example of how we use it|
|Name, contact details (to include postal address, email address, telephone numbers), limited financial information.||We will use this information:
|Details of phone calls and written communications with our staff.||We will use this information to monitor and train our staff in our legitimate interest for the purpose of improving our services.|
We will use this information for a number of reasons in our legitimate interest, including:
To monitor and improve the effectiveness of our website
To ensure the security of our website and services and maintain back-ups of our databases
To improve your experience when using our website
Special categories of personal information include details about your and health, race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation and political opinions. We may collect special categories of personal information about you, likely to be information about your health, when you access our support services such as when you attend our patient support meetings. We will use this information to provide the services you have requested from us, to train our staff and to monitor and improve the quality of our service. We will only collect and handle your personal information in this way and for these purposes with your explicit consent and we will explain the purposes for which the information will be used at the point when we ask for your consent.
Third Party Service Providers
We may share your personal information with third party service providers that perform services and functions at our direction and on our behalf. Such third party services providers include accountants, legal advisers, insurers, IT service providers, payment service providers, security services providers, administrative services providers and marketing agencies engaged by OCF.
An Garda Síochána, government or quasi-government bodies, courts and tribunals
We may share your personal information with these organisations and bodies where required to do so by law.
We will retain your personal information for no longer than is necessary for the purposes for which it is processed. The retention period may be determined by factors including whether we have a legitimate interest in retaining such information that is not outweighed by your fundamental rights and freedoms, whether we have statutory or regulatory obligations to retain personal information for a longer period and whether we may need to retain the information in the event of a legal claim.
While we do not transfer your personal information to countries outside the European Economic Area, third parties who we have engaged may do so in the course of providing services to us. Where the laws of such countries do not afford an equivalent level of protection of personal information as the laws of Ireland, these third parties are contractually obliged to take specific steps in accordance with data protection law to protect your personal information.
One of the following safeguards will be used:
You have a number of rights under data protection law in relation to how we use your personal information. These include the right, free of charge, to:
These rights are in some circumstances limited by data protection legislation. If you wish to exercise any of these rights, you can contact us using the details below. We will endeavour to respond to your request within one month. If we are unable to deal with your request within one month we may extend this period by a further two months and we will explain why.
If you have any complaints about the way we use your personal information please contact us using the details below and we will try to resolve the issue. You also have the right to complain to the Data Protection Commission. You can find further information about the Data Protection Commission at www.dataprotection.ie.