Privacy Notice

---

This Data Protection Statement is effective as and from 25 May 2018

This statement describes how we process your personal information and that of your child.  Please take the time to read it carefully.  You have a number of rights in relation to your information and that of your child including the right to object to processing of your personal information and your child’s personal information where that processing is carried out for our legitimate interests and the right to object to direct marketing at any time.

In this statement we use the terms “we” and “our” and “Giraffe” to refer to Giraffe Childcare, an unlimited company incorporated in the Republic of Ireland.

1. Who we are and how to contact us.

Giraffe Childcare Unlimited is a registered company.  We are the controller responsible for your personal data.  Our contact details are info@giraffe.ie  Phone 01 2450935.

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this data protection statement and our approach to privacy.  If you have any questions about this data protection statement, including any request to exercise your legal rights, please contact the DPO using the details set out below; Data Protection Officer / DPO@giraffe.ie or phone 01 2450935.

2. The purpose and legal basis for processing your information.

We collect your information and that of your child for a number of purposes and rely on a number of different legal bases to use your personal information.

• To enter into and perform a contract with you: In order to enter into and perform a contract with you to provide childcare services we need to collect personal information from you such as your name, address and contact details and information relating to your child, including your child’s name, date of birth and other information about your child. We may also require some financial information from you in order to process payments arising under the contract we have with you.  We collect information about you and your child while your child is in our care which we will process in order to fulfil our contract with you to provide childcare services.We will require certain personal information about you and your child in order to obtain payments from various government programmes on your behalf including the Early Childhood Care and Education Programme (EECE) and the Affordable Childcare Scheme. Where you make an enquiry about our services we will use your information in order to provide you with information about the services we provide and a quotation.  We may receive information about your child including name, date of birth and address at this stage.  We process this data in order to take steps necessary to enter into a contract with you.

 

• To comply with our legal obligations: We are required to process your personal information and that of your child to comply with certain legal obligations to which we are subject, including:

• The Childcare Act 1991 (early years’ service) Regulations 2016
•   The Childcare Regulations (The Childcare Act 1991) (early years’ service) (Amendments) Regulations 2016.

The above legislation requires that we keep certain information including sensitive personal information about the children in our care.

• For our legitimate business interests: Where we process your information or that of your child for our legitimate interests, we ensure that there is a fair balance between our legitimate interest and your or your child’s fundamental rights and freedoms.

We may use your personal information or that of your child to manage our everyday business needs, including accounting, staff rota needs, training, to progress and respond to legal claims, in our legitimate interest.

We may use CCTV images of your child to deal with complaints, in our legitimate interest.  Our legitimate interest is the effective management of our business and ensuring the safety and wellbeing of those under our care.

We may use your personal information to update you on our services, events and news about us, in our legitimate interest.  Where this information constitutes direct marketing you have the right to opt out of this at any time.  You can do this by following the unsubscribe link in an email.  Our legitimate interest is to connect with parents and to inform parents of any updates in our services or events or information which may be of interest to them.

• With your consent:

We sometimes process your child’s personal information with your consent.  We take photographs of the children and children’s activities, your child included, and display them in our centres, on our website or on our social media platforms with your consent.  This consent can be withdrawn at any time by using the contact details of the DPO.

Where you are not a client of Giraffe we will obtain your prior consent before using your information for direct marketing purposes.  You will have the right to withdraw consent at any time.

3. Consequences of not providing information

Where we need to collect personal data by law or under terms of contract with you and you fail to provide that data when requested we may not be able to perform the contract we have or are trying to enter into with you.  For example we are required by law to obtain certain details about your child.

4. Types of Information we collect and some examples of how we use it

We may collect, use, store and transfer different kinds of personal information about you and/or your child as follows and use it for a variety of different purposes:

Information type	Example of how we use it
Address, email address, telephone numbers	We use this information to send you information about your child and our services.
Name, date of birth, PPSN of child and their parent/guardian.	We use this information to obtain payments or subsidies from government schemes including the Affordable Childcare Scheme or the ECCE Scheme and to comply with our obligations under The Childcare Act 1991 (early years service) Regulations 2016 and The Childcare Regulations (The Childcare Act 1991) (early years service) (Amendments) Regulations 2016.
The Name and Address of the parent/guardian of your child, a telephone number where that parent/guardian or a relative or a friend of the child can be contacted during the hours of operation of the service: authorisation for collection of the child	We use this information to comply with our obligations under The Childcare Act 1991 (early years’ service) Regulations 2016 and The Childcare Regulations (The Childcare Act 1991) (early years service) (Amendments) Regulations 2016.
Details of any illness, disability, allergy or special needs of your child together with all of the information relevant to the provision of special care or attention: the name and telephone number of your child’s registered medical practitioner, record of immunisations, if any received by your child, written consent for appropriate medical treatment of your child in the event of an emergency	We use this information in order to comply with our obligations under The Childcare Act 1991 (early years service) Regulations 2016 and The Childcare Regulations (The Childcare Act 1991) (early years’ service) (Amendments) Regulations 2016.
Interactions with our staff including notes of calls with our staff.	We use this information to keep a record of your interactions with us and to monitor and train our staff
Information about incidents which have involved your child.	We use this information in order to advise you of any incidents or events which have involved your child while in attendance at our facilities and to investigate complaints.
Images from CCTV cameras in/or around our premises.	CCTV images are only held on a rolling 7 day week and are only used if necessary in establishing the facts in the context of serious incidents, complaints or concerns and in such circumstances to reassure staff and parents/guardians.  It also serves to enhance the overall security of our facility.

 

5. Information you provide about others.

If you give us personal information about somebody else, with their consent, (for example information about a spouse or co-guardian of the child or other relative or friend) we may add it to any personal information we already hold about you and your child and we will use it in the ways described in this data protection privacy notice.

Before you disclose information to us about another person, you should be sure you have their agreement to do so.  You should also show them this data protection notice.  You need to ensure that they confirm that they know you are sharing their personal information with us for the purposes described in this data protection privacy notice.

6. Who we share your and your child’s information with.

We only share your personal information with a select number of individuals and companies, and only as necessary.

Sharing can occur in the following circumstances and/or with the following persons:

• Statutory and regulatory bodies (including TUSLA, POBAL and Law Enforcement Authorities): we may share your personal information or that of your child with a statutory or regulatory body including TUSLA and/or the Gardaí where required to do so by law or in order to claim any subsidiary childcare payment such as the EECE or Affordable Childcare Payment on your behalf.
• Third Party Service Providers: We may share your personal information or that of your child with third party service providers that perform services and functions at our direction and on our behalf such as our IT providers, printers, lawyers and other business advisors, accountants and providers of security and administrative services.
• In connection with a change of ownership: We may also transfer your personal information to companies we plan to merge with or be acquired by.

7. Storage Periods

We will retain your personal information and your child’s personal information for the purpose of satisfying any legal, accounting or reporting requirements.  We may also retain your and your child’s data by reference to statutory limitation periods.

8. Transfers outside the European Economic Area

We may transfer your personal data outside the European Economic Area.  These countries do not always afford an equivalent level of privacy protection and in such circumstances we take specific steps, in accordance with data protection law and to protect your personal information.  In particular, for transfers of personal data, outside the EEA where there is no adequacy decision by the European Commission we may rely on contractual protection approved by the European Commission.

9. Your and Your Child’s Rights.

You and your child have several rights under data protection law in relation to how we use your personal information.  You have the right free of charge to;

1. Request a copy of the personal information we hold about you.
2. Rectify any inaccurate personal data we hold about you.
3. Erase personal information we hold about you.
4. Restriction of processing of your personal information.
5. Object to our use of your personal information for our legitimate interests.
6. Receive your personal information in a structured commonly used and machine readable format, and to have that data transmitted to another data controller.
7. Where we process personal information based on consent you have the right to withdraw this consent at any time.
8. You have the right to object to direct marketing at any time.

These rights are in some circumstances limited by data protection legislation.  If you wish to exercise any of these rights please contact us using the contact details contained in this form.  We will endeavour to respond to your request within a month.  If we are unable to deal with your request within a month we may extend this period by a further period of two months and we will explain why.

You also have the right to lodge a complaint to the Office of the Data Protection Commission.

10. Updates

We will review and update this data protection statement from time to time. Any updates will be made available on our website  www.giraffe.ie and, where appropriate notified to you.

11. Marketing

We rely on legitimate interest for our marketing activities except where you are not an existing client in which case we will obtain your prior consent.  This consent can be withdrawn at any time by contacting the Data Protection officer. You can object to our use of your information for direct marketing purposes at any time by contacting us at the details set out above or following any of the unsubscribe links in our marketing material.