top of page

DATA PROTECTION ACT AND GENERAL DATA PROTECTION REGULATION (DPA/GDPR)

Updated January 2023.

 

Introduction

We are disclosing information about our data processing practices as required by the United Kingdom’s Data Protection Act 2018 (DPA) and the General Data Protection Regulation (GDPR). This DPA/GDPR Addendum supplements the information contained in the Duns Community Childcare CIC Privacy Notice. 

What legal basis do we rely on to process your personal information?

Duns Community Childcare CIC relies on the following legal basis for processing your personal information. 

  • Performance under a Contract: For Consumers, most of the personal information we process is necessary for us to perform our obligations under a contract we have with you.

  • Legal Obligations: For Consumers, there are many laws that require us to process your personal information. Examples include law and regulations for child/adult care, safeguarding, health and safety, tax and government funding.

  • Legitimate Interest: For Consumers, we have a legitimate interest in processing some of your personal information in some circumstances. We will only process your personal information if our legitimate interests do not override your fundamental rights, freedoms and interests. For any questions regarding this legal basis, please contact info@dunscommunitynursery.com. Some examples of our legitimate interests include:

    • Use of your email address to send you newsletters or information about your services

    • Analysing your digital information and monitoring your digital experience (such as IP, browser, swipes and error message information to improve the website experience for you and provide support. ‘Session’ cookies help you navigate through BH websites efficiently and are temporary and ‘persistent’ cookies are small files left on your device that store your user preferences for current and successive visits to Duns Community Childcare CIC website.

  • Special Categories of Personal Information: Depending upon our relationship with you, we may need to process special categories of personal information in order to provide a service to you. Special categories of personal information that we may process include information relating to:

  • Health data:

    • when receiving adult/child care services, in order for us to provide the Services safely and/or in compliance with applicable law, you may need to provide us with health data of the dependent we care for (for example to inform us of allergies, medicines, special physical or educational requirements, health conditions).In addition, this type of information may be provided to us by a government body;

  • Race/ethnic origin: you may provide this information to us voluntarily

 

International Transfers

We may process some of your personal information outside the European Economic Area (EEA). This may occur if we use a third party provider to process data, for example, accountancy software, childcare applications and so forth. Whenever we transfer personal information out of the EEA, we ensure a similar degree of protection is afforded to it by putting in place appropriate safeguards and protections.

For transfers to the United States, we rely on the Standard Contractual Clauses approved by the European Commission that afford personal information the same protections it has in Europe.

 

What rights do you have over your personal information?

You have the right to request:

  • Access to the personal information we hold about you, free of charge in most cases.

  • The rectification of your personal information to ensure that it’s up-to-date, accurate and complete.

  • The erasure of your personal information (subject to certain exemptions).

  • We stop processing your personal information for direct marketing purposes (either through specific channels or all channels).

  • We and other third parties cease processing your personal information when this was previously undertaken based on your consent and you’ve now withdrawn that consent.

 

Please contact us at info@dunscommunitynursery.com if you would like to:

  • access your personal information that is not available to you directly;

  • request we erase your personal information; or

  • exercise any of your other rights.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

 

In circumstances where we are processing your personal information based on our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal information that doesn’t infringe your rights and freedoms. You have the right to challenge our decision to the Supervisory Authority or seek legal redress through the courts.

If you feel that your personal information hasn’t been handled correctly, or you are unhappy with our response to any requests you have made regarding the use of your personal information, you have the right to lodge a complaint with the relevant Supervisory Authority.

 

  • UK Supervisory Authority: Information Commissioner’s Office at www.ico.org.uk/concerns (opens in a new window; please note we can't be responsible for the content of external websites.)

bottom of page