Acuity Foundation Ireland (hereafter, AFI) is a company limited by guarantee, registered in the Republic of Ireland. Our Registration Office CRO number is 585464. Our Charity Regulation Authority Number is RCN20205970.
Our address is:
Acuity Foundation Ireland
Royal Victoria Eye & Ear Hospital
44 Adelaide Road
In the interest of clarity, AFI will act as a Data Controller when acting as an employer, a Fundraiser and where it is dealing with suppliers who process personal data on our behalf. Appropriate measures shall be taken both technically and organisationally to protect personal data entrusted in our care by natural persons.
Definition of Personal Data
When we refer to personal data in this policy, we are referring to information that can, or has the potential to identify you as a natural person. The term natural person refers to a living human being, with certain rights and responsibilities under the law as opposed to a legal person or legal entity. A natural person under data protection law is also known as a data subject, someone about whom data relates.
What Information Do We Collect About You?
We will collect and process personal data about employees of AFI, and also process personal data about you directly or indirectly as a donor, campaigner, fundraiser or event attendee. This may include:
- personal details which includes but not limited to name, address, email address, telephone number, contact preferences, bank account details including IBAN & BIC, credit card details, tax status for claiming Revenue Charity Tax back along with PPS numbers, gender etc. Cookies will not be used to collect information such as these.
- instances where you make a donation or a purchase merchandise on our website, you will be asked to provide your credit/debit card number during the process. Though AFI is not directly in receipt of these details, your credit card details are encrypted using Transport Layer Security (“TLS”) and are transmitted directly to our payment providers Blackbaud Merchant Services for donations.
- information when you contact us, including communication via email, SMS, post, on the phone or in person (i.e., date, time, and contact mode), donations details including history, events or activities or campaigns that you register for, participate in or attend and any other support you provide to us.
- any other relevant information you may share with us about yourself. This may include details about your employment (where required), interests or affiliations with other charities or groups.
- images which includes photographs or video where you volunteer to participate in AFI related events where you have given consent.
- information about you from publicly available sources such as your work or interests via social media (Facebook, LinkedIn, Instagram & Twitter)
Information You Provide to Us
We may process personal data you provide to us for the following purposes:
- to respond to questions or queries you raise with us by phone or online;
- to process your donation;
- to market to you based on your preferences;
- to register your interest in and communicate with you about;
- services we offer;
- our campaigns and fundraising initiatives, events and activities;
- our fundraising or advocacy workshops;
- sending electronic and or postal materials to you where you have consented to receiving such;
- volunteer opportunities;
- our conferences.
- to process gifts and legacies;
- to process employment or volunteer placements;
- to respond to queries and requests for information;
- to register subscription to our mailing list(s) and e-zine(s);
- record details of your visit to our website, including technical information e.g. IP address, your device, browser type and version.
How will Your Personal Data be Collected?
Your personal data will be collected using one of the following information collection channels:
- directly from you either in person, over the phone, email or using the online form you completed on our website.
- we may also receive information about you when you interact with third parties with whom we work. For example, when you made a donation to AFI through third-party providers with whom we work (e.g., GoFundMe, iDonate, Just Giving etc.) and have given permission to share your information with us.
- we may also collect aggregated or anonymous information when you visit our website or interact with our content e.g. when you watch a YouTube video linked to our site.
- If you are a minor, we may collect the name and contact details of a parent or guardian and, where appropriate, the name and location of your school.
AFI’s Legal Basis for Processing Personal Data
Your personal data will be processed under the following legal bases:
- where you give us consent to process your personal data. Please note that consent when it is given can also be withdrawn;
- where processing of your personal data is necessary for us to meet our contractual obligations;
- where it is necessary for compliance with a legal obligation which AFI is subject (e.g. compliance with the Charities Regulator, regulatory audits, reporting to satisfy our legal and compliance obligations);
- where processing is in AFI’s legitimate interest. This may include but not limited to;
- responding to your queries;
- recruitment and management of employees and volunteers;
- managing your communication preferences, including direct marketing;
- collection and management of donations (e.g. calculating eligibility for and processing claims under Revenue’s Charitable Tax Relief scheme)
- maintaining a record of your relationship with AFI;
- notifying you about fundraising activities or campaigns that you have agreed to participate in;
- providing you with information necessary for events, training or advocacy workshop that may be of interest to you.
As a general rule, AFI will not rely on consent primarily as legal basis for processing your personal data other than in relation to sending email or text message (and in some instances by phone) direct marketing communications to you about fundraising activities and events.
Where you have given consent for us process your personal data for direct marketing purpose, we have put in place clear marketing preference questions and include information on how to explicitly opt out when we send you marketing or fundraising materials, which in the case of emails, is by means of an unsubscribe link.
Please note that changing your marketing preferences will not affect the communication we send you that are not direct marketing related e.g. if you are a monthly donor, you will be sent correspondence related to the donation (e.g. whether you would like to confirm, change, amend or cancel).
You can change your marketing preferences at any time by contacting us using the contact details provided in the ‘What are your rights?’ section of this policy. Where you have previously provided us with your telephone number, please note that we may use that telephone number to call you. You can of course change your preferences at any time if you wish to as detailed above.
We may also contact you about Revenue’s Charitable Tax Relief scheme, if you make eligible donations in any calendar year. It is also our policy to send a receipt/acknowledgment for all donations, irrespective of your marketing preferences.
Who Has Access To Your Data?
We have put in place appropriate needs based access control measures to ensure and guarantee that only AFI employees who have the necessary access rights and received appropriate training can access your personal data.
How will we keep your personal data safe?
AFI are committed to ensuring that your personal information that you entrust in our care are kept safe secure. We have put in place a number of technical security precautions to protect your personal data against corruption, compromise or loss.
AFI staff have a legal duty and responsibility to keep your personal data confidential and have received appropriate training in information security and data confidentiality. We have strict information security policies and procedures in place to ensure that information about you are kept safe, whether they’re held in paper or electronic format.
How long will your personal data be retained?
In line with our retention policy, we will only retain your personal data only for as long as is necessary for the purpose for which it is collected, which may include the purpose of satisfying necessary legal, accounting, audit or reporting requirements. If your personal data processed on the basis of direct marketing, you have a right to request that we stop sending you such marketing materials. On receipt of your request, we will keep a record of your contact details and the appropriate information to enable us to comply with your request not to be contacted by us. If a record of your donations is inactive for eight years or more your record will be deleted from the Acuity Database.
What are your rights?
Under Data Protection Law, you have the following rights which include the:
- right to access your personal data held by us;
- right to request rectification of your personal data where inaccuracies exist;
- right to request to have your personal data erased or “forgotten” under certain circumstances e.g. where your personal data is no longer required for processing or your personal data is being processed unlawfully. Where processing is based on consent and you have withdrawn consent to the processing of personal data and there may be no subsequent justification or legal grounds for continued processing;
- right to object to us processing personal data about you such as processing for profiling or direct marketing purpose;
- right to request provision of your personal data to you in a portable format. This right applies to personal data which you have provided to us, and where the processing is carried out through automated means;
- right to request a restriction of the processing of your personal data.
Where the processing of your personal data is based on you giving us consent to process such information, you have the right to withdraw that consent at any time but any processing that we have carried out before consent withdrawal shall remain lawful.
There is a statutory response threshold of one month for all access requests. It may take longer if the nature of request is complex.
You may exercise any of the above rights by contacting the AFI’s Data Protection Officer using details below:
By E-mail: email@example.com
Acuity Foundation Ireland
Royal Victoria Eye & Ear Hospital,
44 Adelaide Road,
Where you make an access request for your personal data and the request is declined by us, you may lodge a complaint with Irish Data Protection Commission.
Contact details of the Data Protection Commission are outlined below:
Telephone: +353 (0)761 104 800 or Lo Call Number 1890 252 231
Postal Address: Data Protection Commissioner, Canal House, Station Road, Portarlington, R32 AP23, Co. Laois.
Updates to this Policy
Links to Other Sites
This site may, from time to time, contain links to and from the websites of our partners, advertisers and affiliates. If you follow a link from our site to any of these websites, please note that these websites operate according to their individual rules and have their own privacy policies that guides the way they process personal data. AFI cannot, and will not accept responsibility or liability for the policies on these sites. Please check relevant or applicable policies available on these websites before you volunteer or disclose your personal data.