FAN Groups exist in South Wales and further afield. Each Group holds a weekly meeting where local people and those from around the world come together to meet, talk and listen to each other in a friendly and relaxed way.
If you have any questions regarding how information may be used on this website you must use the contact us tab shown on the website or the information contained at the bottom of this notice.
Visitors to our websites
When visiting this site we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in an anonymous way, which does not identify anyone individually. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be open about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
Cookies are small text files sent to your computer or mobile device by the websites that you visit. They help make websites work better and provide information to the owners of the site. For instance we use YouTube cookies to embed videos in pages and Google Analytics cookies to track users’ behaviour whilst on the site. By understanding how people use our site, we can improve the navigation and content to better meet people’s needs. The information collected by our cookies includes IP address, pages visited, browser and operating system. The data will not be used to identify any user personally.
People who contact us via social media
The FAN Charity Social Media accounts can be found in the header of our website, on our contact us page or via the following links:
We will monitor our Social Media pages and will have access to any private or public messages that are sent to us. We may ask for additional information. However, we will only communicate with you using your preferred method of contact.
We will use this information to provide you with the most relevant information for your specific situation and in line with our confidentiality practices, we will not request or share sensitive identifiable information via a public comment or forum and only privately.
If you send us a public message, we will use the information to respond to your query using a private message communicated between you and The FAN Charity. If you send us an article, item of interest or a news item, we may share or retweet your message if appropriate.
People who email us
We will monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.
This Privacy Notice covers the rights of data use under legislation called the General Data Protection Regulation (GDPR). It emphasises The FAN Charity's need to make sure that we explain how we use information.
The information we give you about our use of information will be:
- Brief, easy to read and easily accessible;
- Written in clear, plain language; and
- Free of charge.
What laws do we use?
The law determines how we can use information. In those areas where we use identifiable information, the laws we follow that allow this to happen are listed below:
- General Data Protection Regulation
- UK Data Protection Bill
- Human Rights Act
- Freedom of Information Act
- Common Law Duty of Confidentiality
- Computer Misuse Act
- Audit Commission Act
- Regulation of Investigatory Powers Act
What information do we collect?
Google will use this information to produce user activity reports for this website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
The FAN Charity and all of its services have a “legitimate interest” in continuing to process personal data where:
- there is a real business interest being pursued in continuing to process specific personal data;
- the processing is absolutely necessary in order for the business to pursue that interest (i.e. the interest cannot be pursued in another way which is proportionate); and
- the processing is balanced against the impact such processing will have on the fundamental rights and freedoms of data subjects.
It is important that you understand who is responsible for keeping your data safe. The FAN Charity collects data and where applicable, your personal data with your consent.
Sharing your information
Where applicable, data may be shared with only those who are involved with the objectives referred to above. This may in certain circumstances, include external companies who may carry out work on our behalf, this will be communicated to all users of the specific service where it is possible to do so and where it includes the requirement to use personal data, this is Privacy Impact Assessed before use.
It is important to note that anyone receiving information about you are under a legal duty to keep it confidential. We only request, use and share the minimum information necessary for the purposes it was required.
We will never sell your information and we will not share it without the appropriate legal authority.
Security of your Information
The FAN Charity takes responsibility to look after all information very seriously. This is regardless of whether it is electronic or in paper form and whether it is identifiable or not.
The FAN Charity also employs someone who is responsible for managing information and its confidentiality to ensure:
- your information is protected; and
- inform you how it will be used.
All staff are required to undertake training on a regular basis. Comprehensive training is required to help protect the information that has been given, used, processed by The FAN Charity.
The training makes sure that all staff working in The FAN Charity, are aware of their responsibilities about the handling of your information regardless of the department that they work in.
What are you entitled to?
Where information collected on you is identifiable and relevant, The FAN Charity will make sure that you are able to have access to this. This is so that you know what we hold.
You have the right:
- to know about details of how your information is used; and
- have copies of your information.
If you wish to know more, please contact the person listed below for further information about your rights of access.
The FAN Charity tries to answer all requests for access to information as quickly as possible. The organisation is obliged to provide a response to your request within a month (30 calendar days) of receiving it, but this can be extending if the request is complex and extensive.
The FAN Charity will look at your request to make sure that the information requested is personal information. Most of the time, it will be clear that the information is personal but The FAN Charity will contact you if it is not clear within your request.
Do I have to pay a fee?
The information will be provided free.
However, we could ask for a small fee. This is where the request is large or repeated. This will be based on the cost of providing it.
If you wish to find out more about fees for information, then please contact the person listed at the bottom of this notice.
How will information be provided?
If your information is identifiable, it will be provided in a format that can be used on another system easily if it is electronic (i.e. Microsoft Word or Excel). Otherwise, it will be supplied on paper.
Where personal information may be collected and for the use of this to be lawful, The FAN Charity may ask for permission from you. This is not necessary if the use is for a lawful basis under the current regulations but consideration at all times will be made where consent is anticipated to be collected and administrated correctly.
The FAN Charity will ask service users for consent for where personal information is part of the processing. The FAN Charity will ensure that any consent provided must be freely given, specific, informed and unambiguous. Each individual must provide “clear affirmative action” that they consent to the data being used for the specific work area and be notified of its use via a separate privacy notice explaining what data is being used and why.
At the time of obtaining consent, The FAN Charity will explain to individuals that they are able to withdraw consent at any time but also that this would not render processing on the basis of consent prior to withdrawal to be unlawful and is determined on whether the data is also identifiable at the time of the request.
Individuals must also be able to easily and freely withdraw consent at any time and use their right to be forgotten. However, if the data is unidentifiable and the data subject cannot be distinguished from the data collected, the right to be forgotten will not apply.
What about stopping use?
Stopping use would ordinarily apply to personal information and not unidentifiable data held by The FAN Charity. However, this will be reviewed on a case-by-case basis dependant on the work being completed.
The FAN Charity will not be responsible for content that has already been freely shared in the public domain, for example on social media networks, for purposes of journalism and other platforms outside The FAN Charity's control. If a Data Subject requires this information to be removed (and is easily identifiable to them), then they will need to apply to the organisation or company hosting the information and request its removal.
Automated decision taking
The FAN Charity also provides safeguards against risks that involve processes that include automated decision-making.
This applies when:
- it is an automatic process; and
- there is a legal effect on a decision made with the information.
Some areas of work within The FAN Charity take a small number of automated decisions but there is mostly human involvement in this. For example, human involvement in the production of statistical data for reporting purposes or online questionnaire results will require a degree of automation to effectively specify, collate and download specific datasets to create reports and outcomes.
However, The FAN Charity will take steps to identify how many automated decisions it makes and whether these are acceptable with each process.
In turn, The FAN Charity will ensure that any automated profiling is fair and lawful. The FAN Charity will use correct procedures, to include reducing errors and correcting where data is not accurate.
What about rights to correct or delete inaccurate information?
If any personal data has been provided by yourself and you feel that this is incorrect, you are entitled to request that The FAN Charity correct any mistakes in this information, regardless of the context of the use.
The FAN Charity must ensure that proven inaccurate or incomplete information is either erased or corrected.
Keeping your information
We will only store information for as long as necessary dependant on the type and use.
Records are stored in line with Records Management Code of Practice for Health & Social Care’s retention and disposal schedule. This determines the minimum length of time records should be kept.
The FAN Charity will retain data in order to comply with legal requirements.
Making a complaint
We try to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
We are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below.
If you wish to make a complaint about any issues you have experienced regarding your information, then please contact:
The FAN Charity
If you are still unsatisfied following your complaint and this remains unresolved, you have the right to make a complaint to the:
Information Commissioner’s Office,
2nd Floor, Churchill House,
17 Churchill Way,
Links to other websites
We welcome your feedback. We do not pass on any of your personal information when dealing with your enquiry unless you have given us permission to do so. Once we have replied to you, we keep a record of your message for audit and evaluation purposes.