Quwwat-ul-Islam (QIS) is committed to safeguarding your privacy.
This privacy notice will explain how we look after your personal data; please read it carefully. By using this site and/or our services, you consent to the Processing of your Personal Data as described in this Privacy Policy.
DEFINITIONS
There are some key terms at the heart of General Data Protection Regulation (GDPR) and to help you we have explained them below:
What does Personal Data mean? Personal Data means any information about an individual from which that person can be directly or indirectly identified.
What is a Data Subject? A Data subject is an individual (a natural person) whom the particular data is about. So, from a Quwwat-ul-Islam (QIS) perspective the data subject could be a Quwwat-ul-Islam Society member, staff, parent, carer, volunteer or student.
What is a Data Controller? Data Controller determines the purposes and means of processing personal data. In other words, how will the personal data be used. From a QIS perspective, we will be the data controller to process personal data e.g. processing personal data to enrol a QIS member or for a parent enrolling their child for Islamic education or even a volunteer.
What is a Data Processor? A Data Processor is responsible for processing personal data on behalf of a controller under clear and specific instructions.
DATA PROTECTION PRINCIPLES
As QIS will be a Data Controller, we promise to follow the following data protection principles Inshallah to ensure that:
● Processing is lawful, fair, transparent. Our Processing activities have lawful grounds. We always consider your rights before Processing Personal Data. ● Processing is limited to the intended purpose. Our Processing activities fit the purpose for which Personal Data was gathered. ● Processing is done with minimal data. We only gather and Process the minimal amount of Personal Data required for any purpose.
● Processing is limited with a time period. We will not store your personal data for longer than needed. ● We will do our best to ensure the accuracy of data. ● We will do our best to ensure the integrity and confidentiality of data.
DATA WE GATHER
Personal data that we may collect, use, store and share (when appropriate) includes, but is not restricted to:
● Contact details, address, contact preferences, date of birth, next of kin in case of an emergency, identification documents ● Employment and recruitment related ● Details of any medical conditions, including physical and mental health ● Donor Information ● Photographs ● CCTV images captured for security reasons ● System usage data
In some cases, the data may not be personal data by itself but where it is associated with other data from which you can be identified we treat it as personal data.
WHY WE USE YOUR PERSONAL DATA
Personal data that we may collect, use, store and share (when appropriate) includes, but is not restricted to:
● Support QIS’s membership enrolment and on-going membership system ● Support QIS’s Islamic education of students ● Support QIS’s ongoing community related events as and when they arise ● Monitor and report on child’s progress ● Protect child welfare and wellbeing ● Assess the quality of our services ● Administer admissions waiting lists ● Comply with the GDPR laws regarding data sharing ● Inform our recruitment and retention policies ● Facilitate safe recruitment, as part of our safeguarding obligations towards pupils ● Support effective performance management ● Inform our recruitment and retention policies ● Allow better financial modelling and planning
OUR LEGAL BASIS FOR USING THIS DATA
We will only collect and use your information when the law allows us to. Most often, we will use your information where:
● We need to comply with the law ● We need to use it to carry out a task in relation to providing or improving QIS services being provided to the community e.g. Islamic education, lectures, events, membership, donations etc ● the public interest (in order to provide you with an education) Sometimes, we may also use your personal information where: ● You, or your parents/carers have given us consent to use it in a certain way ● We need to protect your vital interests (or someone else’s vital interest)
Where we have got consent to use your data, you may withdraw this at any time. To withdraw your consent, please contact us at [email protected]
Some of the reasons listed above for collecting and using your information overlap, and there may be several grounds which mean we can use your data.
HOW TO ACCESS PERSONAL INFORMATION WE HOLD ABOUT YOU
Individuals have a right to make a ‘subject access request’ to gain access to personal information that we hold about them. If you make a subject access request and if we do hold information about you, we will:
Give you a description of it
Tell you why we are holding and processing it and how long we will keep it for
Explain where we got it from, if not from you
Tell you who it has been, or will be, shared with
Give you a copy of the information in an intelligible form
You may also have the right for your personal information to be transmitted electronically to another organisation in certain circumstances.
If you would like to make a request, please contact our data protection officer.
WHO ELSE CAN ACCESS YOUR PERSONAL DATA?
We do not share your Personal Data with strangers. Personal Data about you is in some cases provided to our trusted partners or authorities after their privacy notice has been reviewed.
We only work with Processing partners who are able to ensure an adequate level of protection to your Personal Data. We disclose your Personal Data to third parties or public officials when we are
legally obliged to do so. We might disclose your Personal Data to third parties if you have consented to it or if there are other legal grounds for it.
HOW WE SECURE AND STORE YOUR DATA
We do our best to keep your Personal Data safe. We use anonymisation and pseudonymisation where suitable. We monitor our systems for possible vulnerabilities and attacks.
Even though we try our best we cannot guarantee the security of personal information. However, we promise to notify and work with the suitable authorities should a data breach occur and will notify you if there is a threat to your rights or interests.
If you have an account with us, note that you have to keep your username and password secret.
We have a record retention policy which sets out how long we must keep personal information.
COOKIES AND OTHER TECHNOLOGIES WE USE
Cookies are required for you to be able to use some important features on our website as well as tracking the use and performance of our website and other services.
You can remove cookies stored in your computer via your browser settings. Alternatively, you can control some 3rd party cookies by using a privacy enhancement platform such as optout.aboutads.info or youronlinechoices.com. For more information about cookies, visit allaboutcookies.org.
We use Google Analytics to measure traffic on our website. Google has their own Privacy Policy which you can review here. If you’d like to opt out of tracking by Google Analytics, visit the Google Analytics opt-out page.
YOUR CONSENT
By using this website, you consent to the collection and use of this information by us for the purposes described above. If we decide to change our Privacy Policy, we will update our privacy notice.
COMPLAINTS
We take any complaints about how we collect and use your personal data very seriously, so please let us know if you think we’ve done something wrong.
You can make a complaint at any time by contacting our data protection officer.
● Or write to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
UPDATES
This privacy notice was last updated on 1st July 2020
CONTACT US
If you have any questions, concerns or would like more information about anything mentioned in this privacy notice, please contact our data protection officer:
The Education Space 760 Barking Road, London, E13 9PJ [email protected] 0208 249 6900
