YWAM Worcester Privacy Policy

The following is YWAM Worcester’s policy with respect to its holding of personal information about staff, students or people who have contacted the organisation. In keeping with this policy, the YWAM Worcester Board of Directors has authorised the following statement to be placed on our website. The purpose of this statement is to provide information about the data collection procedures of YWAM Worcester. It lists what information is collected, why it is collected, how it is used, who it is used by, your rights, to whom it is disclosed and how to have information amended or deleted. We will take all reasonable steps to protect the privacy of any personal information in our possession. YWAM Worcester will take all reasonable steps to ensure that information we collect, use or disclose is collected by lawful and fair means, is accurate, complete, up-to-date and is kept strictly confidential either in an electronic database or lockable cabinets. In line with our Privacy Policy, personal information will be collected and managed in a respectful and confidential manner by YWAM Worcester authorised personnel only. These staff will receive training appropriate to their role.

Contents

Protecting your privacy rights
Information we collect
How and why we collect personal information
How do we process your data
Lawful Basis for Processing
Explanation of Lawful Basis
Opting Out
Transferring your data
Electronic newsletters
Your rights
Cookies Policy
Google Adsense
Links to other internet sites
Changes to this privacy policy
Your acceptance of these terms
Maintaining your information/Questions about privacy
Complaints

Protecting Your Privacy Rights
YWAM Worcester acknowledges its role in protecting your privacy rights. Any information that is provided to our organisation is only used for the purposes for which you provided it. We will not use or disclose any information provided for a particular purpose for any other purpose without first notifying the individual concerned in writing.
What Information Do We Collect?

We primarily collect personal and non-personal information about our past, present and future students and staff members. Information is also gathered from other people who contact our organisation directly as well as contacts and organisations working in similar fields to YWAM Worcester and individuals with whom we have professional connection. Some of this information comes from third parties. Personal information is only collected on the request of the individual concerned. All information identified as personal is treated as confidential; this includes credit card details from third parties and government related identifiers. We may collect the following information about you that makes you identifiable. We may also process, store, transfer or modify data that has been grouped together such as:

  • Identity Data including first name, surname, username, date of birth, nationality (but not race or ethnicity) and any other personal details you may send to us.
  • Contact Data includes email address, geographic address, and social media data.
  • Enrollment Data includes educational and vocational experience, character references, interview data, application decision data.
  • Technical Data includes your internet protocol (IP) address, operation system, browser type and plug-ins, mobile platform, and other technical data regarding your computing platform.
  • Usage Data includes data regarding how you use our platform, which pages you visit, and other relevant metrics about our website.
  • Communication Data includes marketing data, including choice in whether or not to receive newsletters and communication from us or our third parties.

Sometimes we aggregate data such as statistical metrics or demographic information stemming from your personal data. It should be noted that statistical and demographic data is not personal data when it does not directly or indirectly reveal your identity. Only when statistical data is combined with personal data will this Privacy Notice apply. In some instances, such as to apply to one of our training offerings and complete an application, we may receive sensitive data about you, which may be defined differently in various countries. Using Article 9 of the GDPR as a baseline, this data, if provided, may be associated with your religious or philosophical beliefs, or could include information about your health. If you provide us this information, you do so by choice and under no compulsion whatsoever. We commit to safeguard your data and provide it adequate protections, and will only use it according to the purposes set forth in this Privacy Notice and according to legal limitations.

How and why we collect personal information

We collect information from staff and student applications, their associated referees, online surveys and payment receipts. Where appropriate, this information is collected to keep accurate records, to process payments, to assist in specific activities conducted by our organisation and to keep members and associated bodies informed of our work. All required personal information is directly related to the organisation’s functions and activities for participants. If any further information is required in regards to any participants, we may contact the appropriate referee. Here’s more information about these methodologies:

  • Direct interactions. We may receive your information directly when you:
    • e-mail us;
    • request marketing information to be sent to you;
    • enquire about enrollment;
    • submit an application;
    • interview with us; or
    • provide us feedback.
  • Automated technologies or interactions. When you use our website or log in to our services, we may learn technical data about your computing system and browsing activity. This data is gathered by employing cookies and related tools.
  • Third parties. Your personal data may be received via a third party as follows:
    • Via analytics through providers such as Google Analytics, which is located outside of the EU; and
    • From service providers, we use, including companies such as:
      • Salesforce to process applications;
      • PayPal to process invoices and payments;
      • MailChimp to communicate with you; and
      • Social Media platforms such as Facebook, Instagram, and YouTube for collaboration and advertising purposes.

To learn more about the cookies we utilise on this site please refer to our cookie policy in this document.

How do we process your data

Our Organisation will only process your data according to the allowance permitted by law. In most instances, we will only use your data in the following situations:

  • when you provide us with your consent to process your personal data, which may be revoked by you at any time and for any reason;
  • when it may be necessary for our legitimate interest;
  • when we may need to respond to a legal requirement or regulatory action; and
  • where we need to fulfill our obligation to provide training when you enroll into one of our training programmes.

If you have any further questions about how we process your data, or if you want to revoke your consent, please contact us at info@ywamworcester.com In the following table, we describe ways your personal information may be used; each of these uses are tied to a legal basis for processing. Further, we have also outlined wherever we have a legitimate interest to process your data where appropriate.

Lawful Basis for Processing
Processing Activity Personal Data Lawful Basis
Requests for information:

  • e-mails to us;
  • requests for marketing information;
  • enquiries about enrollment;
  • responding to feedback provided to us.
 Identity Data
  • Name
Contact Data
  • Email Address
  • Phone Number
  • Country
Communication Data
  • marketing preferences
 Article 6

(a) Consent: the individual has given clear consent to process their personal data for a specific purpose.
Completing and submitting an application for enrollment Identity Data:

  • Title
  • Given Names
  • DoB
  • Gender
  • Nationality (but not race or ethnicity)
Contact Data:

  • Phone number
  • Social Media Handle
  • Email
  • Mailing address
  • Language Preference
Enrollment Data:

  • Education and Vocational experience
  • Character references
Special Categories of Data:

  • Religious beliefs
  • Information about your health
 Article 6

(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.
Relationship management including:

  • Asking you for feedback.
  • Notifying you about changes to our terms and conditions,
  • Notifying you about changes to our Privacy Notice.
  • Sending you communication through our newsletter.
  • Asking you to update your contact information.
  • Communicating with you about our services.
 Identity Data:

  • Name
Contact Data:

  • Email Address
  • Phone Number
  • Country
Communication Data:

  • Marketing preferences
 Article 6

(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.

(c) Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations).

(f) Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
Payment processing:

  • Donations
  • Invoices and payments
 Identity Data:

  • Name
Contact Data:

  • Email Address
  • Billing Address
  • Phone Number
  • Tax Deductible Location
 Donations are processed based on article 6

(a) Consent: the individual has given clear consent to process their personal data for a specific purpose.

Invoices and payments are processed based on Article 6 (b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.
Application Decision Process Identity Data:

  • Title
  • Given Names
  • DoB
  • Gender
  • Nationality (but not race or ethnicity)
Contact Data:

  • Phone number
  • Social Media Handle
  • Email
  • Mailing address
  • Language Preference
Enrollment Data:

  • Education and Vocational experience
  • Character references
  • Interview data
  • Application decision data
Special Categories of Data:

  • Religious beliefs
  • Information about your health
 Article 6

(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.

It is also possible that we may process your personal information via more than one lawful basis depending upon the purpose for which we are using it. If you have questions about the lawful basis by which we are processing your data, please contact us at info@ywamworcester.com.

Explanation of Lawful Basis

Many laws around the world require a controller to show it has properly considered which lawful basis applies to each processing purpose. It also requires controllers to justify the decision. Toward that, and using EU GDPR definitions below, the following lawful basis applies to processing activities noted in the table above.

  • Consent means we have received your consent to process your personal data for the purpose specified.
  • Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you, unless we have your consent or are otherwise required or permitted to by law. You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us at info@ywamworcester.com.
  • Performance of Contract means processing your data where it is necessary for the performance of an agreement to which you are a party or to take steps at your request before entering into such an agreement.
  • Comply with a legal or regulatory obligation means processing your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.
Opting Out

You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time. Where you opt-out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a service purchase, service experience or other transaction.

Transferring your data
Name of Subprocessors Registered Business Address Location of Processing Link to Privacy / Security Policy
UofN Records System Chemin du Praz d’Eau 1 1000 Lausanne 25 Switzerland Frankfurt, Germany https://uofn.edu/privacy-notice
Salesforce Frankfurt, Germany Frankfurt, Germany https://www.salesforce.com/company/privacy/
G-Suite Googleplex Mountain View, California United States https://policies.google.com/privacy
Google Analytics Googleplex Mountain View, California United States https://policies.google.com/privacy
MailChimp Ponce City Market Atlanta, Georgia United States https://mailchimp.com/legal/privacy/
PayPal Paypal Headquarters 2211 N. 1st St. San Jose, CA 95131 United States https://www.paypal.com/za/webapps/mpp/ua/privacy-full
PayFast Hout Bay, Cape Town, 7872 South Africa https://www.payfast.co.za/privacy-policy
Facebook Inc. Menlo Park, California, United States United States https://www.facebook.com/privacy/explanation

Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by employing at least one (or more) of the following safeguards:

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

Electronic newsletters

If the User decides to opt-in to our mailing list or a mailing list of any of our training programs or ministries, they will receive emails that may include ministry news, updates, related opportunity or service information, etc. We may use third-party service providers to help operate our ministry and the Site or administer activities on our behalf, such as sending out newsletters or surveys. We may share the Users information with these third-parties for those limited purposes provided that the User has given us their permission. This permission is obtained when the User decides to opt-in to our mailing list(s).

Your Rights

All persons or organisations for whom we have details recorded have the right to ask for a copy of these details free of charge at any time. Persons also have the right to update and/or alter their details at any time. In order to do so, we ask that they submit a ‘Request to View Personal Records’, which can be provided on request. YWAM Worcester will promptly remove the name of any individual from its database or mailing lists upon that person making such a request in writing, and will not make its mailing lists or any part thereof available to any third party for their use. No third parties can access personal files without written permission from the individual whose information has been requested. Requests will be processed by YWAM Worcester within 30 days with a written notice of explanation in cases of refusal. Personal information collected will not be disclosed, nor details altered until your identity has been confirmed. All persons contacting our organisation have the option of remaining anonymous but it may prevent them from participation in activities that we run.

YWAM Worcester will make every reasonable effort to ensure that children’s privacy and other rights are respected and not compromised. It is however, ultimately the responsibility of parents to monitor their children’s internet, phone and our communication technology usage. With the exception of an independent minor, underage participants cannot access or change personal information without parent/guardian consent.

Under certain circumstances, you have rights under data protection laws in relation to your personal data. You have the right to:

  • Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
  • Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
  • Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
  • Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c ) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
  • Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
  • Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you wish to exercise any of the rights set out above, please contact us at info@ywamworcester.com. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

YWAM Worcester - Website

This privacy statement applies to the site known as www.ywamworcester.com

Cookies Policy

Our site may use “cookies” to enhance User experience. A User’s web browser places cookies on their hard drive for record-keeping purposes and sometimes to track information about them. Users may choose to set their web browser to refuse cookies, or to alert them when cookies are being sent. If they do so, some parts of this site may not function properly.

We use Google Analytics and embedded YouTube videos, these services use cookies.

However, the User may prefer to disable cookies on this site and on others. The most effective way to do this is to disable cookies in the browser. We suggest consulting the Help section of the browser or taking a look at https://cookiesandyou.com/ which offers guidance to achieve this for all modern browsers.

Google Adsense

Some of YWAM Worcester’s online advertising may be served by Google. Google’s use of the DART cookie enables it to serve advertisements to Users based on their visit to our site and other sites on the Internet. DART uses “non personally identifiable information” and does NOT track personal information about you, such as your name, email address or physical address. You may opt out of the use of the DART cookie by visiting the Google ad and content network privacy policy at http://www.google.com/privacy_ads.html

Links to Other Internet Sites

Our website may contain links to other sites. Other sites may also have links to our site. Please note that YWAM Worcester cannot take responsibility for content, privacy practices or business practices at these external sites.

Changes to this Privacy Policy

Youth With A Mission Worcester has the discretion to update this privacy policy at any time. When we do, we will post a notification on the main page of our Site and revise the date at the bottom of this page to reflect the date of these changes. We encourage the User to frequently check this page for any changes and to stay informed about how we are helping to protect the personal information we collect. The User acknowledges and agrees that it is their responsibility to review this privacy policy periodically and become aware of modifications.

Your acceptance of these terms

By using this Site, the User signifies their acceptance of this policy. If the User does not agree to this policy, please do not use our Site. Continued use of the Site following the posting of changes to this policy will be deemed as the Users acceptance of those changes.

Maintaining Your Information/Questions About Privacy:

For further information about the management of your personal information or to access or change personal information we hold about you, please contact us using the contact details below.

Email: info@ywamworcester.com
Call: +27 (0)23 347 7040
Mail: YWAM Worcester, PO Box 926. Worcester, 6850. South Africa

Complaints

To register an issue in relation to the way that YWAM Worcester has dealt with your privacy, please contact our Registrar office who will address your concerns promptly and advise you of your rights. If requested, a ‘Complaints and Appeals’ form can be provided and will be processed within 10 days of submission. If you are dissatisfied with the outcome of your appeal, you can make a complaint to the relevant government department.

This policy was last updated on 06 June 2019.