Privacy Policy
Iechyd Da (Gwledig) Ltd understands that the information you share with us is important to you, and we are committed to protecting and respecting your privacy, as well as clearly stating how the information we gather is used to deliver our services to you.
Aim
This privacy policy aims to give you information on how Iechyd Da collects and processes your personal data through your use of this website (iechydda.cymru).
Summary
Iechyd Da (Gwledig) Ltd is a Private Company limited by guarantee without share capital. Incorporated on 19th December 2013, company number 08821623.
Iechyd Da will not sell or share your personal information with any third parties.
Iechyd Da will protect all personal information using appropriate organisational and technical controls.
Iechyd Da will only retain your data for as long as it is necessary.
You have the right to request a copy of the personal information Iechyd Da holds about you and suggest corrections or deletions.
Controller
Iechyd Da (Gwledig) Ltd is the controller and responsible for your personal data.
If you have any questions or concerns about Iechyd Da’s handling of your personal data, please contact us by email info@iechydda.cymru or by post at Iechyd Da (Gwledig) Ltd, PO Box 8, North Road, Aberystwyth SY23 2WB.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK’s authority for data protection (ico.org.uk). Iechyd Da would appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
Information Iechyd Da may collect from you
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer the following information:
Identity data including your first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, gender and name of your company.
Your contact data including email address, postal address and telephone number.
Data you send to Iechyd Da via this website, including information you provide through surveys on Iechyd Da’s website, or other written information that relates to an enquiry.
Website usage data which includes information about how you use our website.
Technical data including internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Marketing and communications data which includes your preferences in receiving marketing from us and your communication preferences.
Iechyd Da gathers and uses personal information about individuals who:
- Contact Iechyd Da by post, phone, email or otherwise;
- Use Iechyd Da’s Information and Communications Systems;
- Complete a form via Iechyd Da’s website;
- Enter a survey on Iechyd Da’s website;
- Subscribe to Iechyd Da’s services or publications;
- Request marketing to be sent to them;
Use Iechyd Da’s website (as you interact with Iechyd Da’s website or systems, Iechyd Da will automatically collect technical data about your equipment, browsing actions and patterns. Iechyd Da collects this personal data by using cookies and other similar technologies.
Data received from third parties
Iechyd Da may receive personal data about you from the following third parties:
The Rocket Science Group LLC, who operate MailChimp, which Iechyd Da uses to manage email marketing subscriber lists and send emails to subscribers.
The Welsh Government, who may have contracts with Iechyd Da to provide particular services.
How Iechyd Da uses your personal data
Iechyd Da will only use your personal data when the law allows us to. Most commonly, Iechyd Da will use your data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.
- Where we need to comply with legal obligation.
Storing information
We always hold your information securely.
To prevent unauthorised disclosure or access to your information, Iechyd Da has implemented strong physical and electronic security safeguards to ensure, as far as reasonably possible, the confidentiality of your information at all times.
Any personal information we hold about you is stored and processed in accordance with relevant data protection legislation.
Cookies
A cookie is a small text file that is stored on your device by a web server within our domain. Cookies cannot be used to run software programmes or add a virus to your device. They are unique to you and avoid you having to input the same information and preferences each time you visit Iechyd Da’d website.
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies you may not be able to access all the content on the website.
Disclosure of your personal data
Iechyd Da may share your personal data with the parties below:
- Service providers who operate IT systems, system administration services and general business support
- Professional advisors including lawyers, accountants and insurers who provide consultancy, banking, legal, insurance and accounting services.
- The Welsh Government, and UK Government and their agencies based in the United Kingdom who require reporting of processing activities in certain circumstances.
- Organisations contracted by the Welsh Government to deliver a particular service.
We shall only share personal information with trusted third parties where er have the appropriate contracts and controls in place, which will have taken into account their information handling policies and processes.
Links to external websites
Iechyd Da’s website may contain links to third party websites. We are not responsible for the content of other websites, or for the protection or privacy of data you submit to them. This privacy policy only applies to Iechyd Da’s website.
Marketing
Iechyd Da may use your personal data, including data received from third parties, to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which services or offers may be relevant to you.
You can ask us to stop sending you marketing messages at any time by following the opt-out link on any marketing message sent to you or by contacting us directly at any time.
Your legal rights
You have the right to:
- Request access to your personal data (“data subject access request”). This enables you to receive a copy of all the personal data we hold about you and to check that we are lawfully processing it.
- Request correction of the personal data that Iechyd Da holds about you. This enables you to have any incomplete or inaccurate data corrected.
- Request erasure of your personal data. This enables you to ask Iechyd Da to delete and remove all personal data where there is no good reason for us to continue to process it. Iechyd Da may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, following your request.
- Object to processing of your personal data. This is where Iechyd Da relies on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel in impacts on your fundamental rights and freedoms.
- Request restriction of processing of your personal data. This enables you to ask Iechyd Da to suspend the processing of your personal data in the following scenarios:
- If you want Iechyd Da to establish the data’s accuracy
- Where Iechyd Da’s use of the data is unlawful but you do not wish for us to erase it.
- Where you need Iechyd Da to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
- You have objected to Iechyd Da’s use of your data but we need to verify whether we have overriding legitimate grounds to use it.
- Request the transfer of your personal data to you or a third party. Iechyd Da will provide you, or a third party you have chosen, your personal data.
- Withdraw consent at any time where Iechyd Da are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdrew your consent.
If you wish to exercise any of the rights above, please contact Iechyd Da at info@iechydda.cymru or send a letter to Iechyd Da (Gwledig)Ltd, PO Box 8, North Road, Aberystwyth, SY23 2WB.
We will aim to respond within 10 working days and provide the information within 28 days.
You will not have to pay a fee to access your personal data (or exercise any of your rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
Complaints
Iechyd Da works hard to ensure your personal information is treated appropriately and would always welcome the opportunity to rectify any complaints that you may have about your data held by Iechyd Da. You can contact Iechyd Da at info@iechydda.cymru or send a letter to Iechyd Da (Gwledig) Ltd, PO Box 8, North Road, Aberystwyth, SY23 2WB.
Retaining your data
Iechyd Da (Gwledig) Ltd and the information we retain about you is subject to regulatory and legal requirements. Iechyd Da aims not to keep your personal data for any longer than we have to for us to fulfil our obligations to you. If your data needs to be retained, we will ensure that the appropriate security and organisational measures are put in place to protect the use of your data.
International transfers
The majority of Iechyd Da’s activity is within the UK and we therefore operate under the ICO (lead data protection authority in the UK) requirements.
Please note that some countries outside the EEA may not have similar safeguards in place regarding protection and use of your personal data as those inside the EEA. Therefore, if we do transfer your personal data to countries outside the EEA, we will comply with the relevant legal rules governing such transfers and take reasonable steps to ensure that your data us treated securely.
Changes to this policy
Iechyd Da will review the Privacy Policy periodically and will update the version available on the website and through appropriate communication channels.
