Polisi Preifatrwydd

Ffeiliau bach sy’n cael eu cadw ar yriant caled cyfrifiadur y defnyddiwr yw cwcis. Maent yn olrhain, cadw a storio gwybodaeth am ryngweithiadau a defnydd y defnyddiwr o’r wefan. Mae hyn yn caniatáu i’r wefan, trwy ei weinyddwr, i ddarparu profiad wedi’i deilwra ar gyfer defnyddwyr o fewn y wefan hon. Os yw defnyddwyr yn dymuno gwrthod y defnydd o, ac arbed cwcis o’r wefan hon i’w cyfrifiaduron, dylent gymryd camau o fewn gosodiadau diogelwch eu porwyr i atal pob cwci o’r wefan hon a’i darparwyr allanol.

Mae’r wefan hon yn defnyddio meddalwedd olrhain trydydd parti, Google Analytics, i fonitro defnydd ymwelwyr. Mae hyn yn ein galluogi i ddeall sut ydych yn ei defnyddio a gwella ein gwefan a’ch profiad yn barhaus. Bydd y feddalwedd yn arbed cwci i yriant caled eich cyfrifiadur i olrhain a monitro eich ymgysylltiad a’ch defnydd o’r wefan, ond ni fydd yn storio, arbed nac yn casglu unrhyw wybodaeth bersonol. Gallwch ddarllen polisi preifatrwydd Google yma am fwy o wybodaeth; www.google.com/privacy.html.

Gall darparwyr allanol storio cwcis eraill i’ch gyriant caled pan fo’r wefan hon yn defnyddio rhaglenni atgyfeirio, dolenni noddedig neu hysbysebion. Defnyddir cwcis o’r fath ar gyfer trawsnewid ac olrhain cyfeirio ac maent fel arfer yn dod i ben ar ôl 30 diwrnod, er y gall rhai gymryd mwy o amser. Ni chaiff unrhyw wybodaeth bersonol ei storio, ei arbed nac ei gasglu.

Mae defnyddiwyr sy’n cysylltu â’r wefan a/ neu ei berchennog, yn gwneud hynny yn ôl eu disgresiwn eu hunain ac yn darparu unrhyw fanylion personol y gofynnir amdanynt ar eu cyfrifoldeb eu hunain. Cedwir eich gwybodaeth bersonol yn breifat a’i storio’n ddiogel hyd nad oes ei angen mwyach neu nid oes iddo unrhyw ddefnydd, fel yn Neddf Diogelu Data 2018. Gwnaed pob ymdrech i sicrhau bod ffurflen ddiogel yn cael ei hanfon i gyflwyno prosesau e-bost ond cynghorir defnyddwyr eu bod yn gwneud hynny ar eu cyfrifoldeb eu hunain.

Defnyddiwn unrhyw wybodaeth a gyflwynir i ddarparu rhagor o wybodaeth i chi ynghylch y gwasanaethau a gynigiwn neu i’ch cynorthwyo i ateb unrhyw gwestiynau neu ymholiadau a gyflwynwyd gennych. Nid yw hon yn rhestr gyflawn o’ch hawliau defnyddiwr yng nghyswllt derbyn deunydd marchnata ar e-bost. Ni chaiff eich manylion eu pasio at unrhyw drydydd parti – BYTH.

Er mai dim ond cysylltiadau allanol diogel a pherthnasol y byddwn yn ceisio cynnwys, cynghorir defnyddwyr i fabwysiadu polisi o fod yn ofalus cyn clicio ar unrhyw gysylltiadau gwe allanol a gynhwysir ar y wefan hon. (Mae dolenni allanol yn cynnwys testun y gallwch glicio / baner / dolenni delweddau i wefannau eraill).

Ni allwn warantu neu wirio cynnwys unrhyw wefan sydd wedi’i chysylltu’n allanol er gwaethaf ein hymdrechion. Felly, dylai defnyddwyr nodi eu bod yn clicio ar gysylltiadau allanol ar eu cyfrifoldeb eu hunain ac ni all y wefan hon na’i pherchnogion fod yn atebol am unrhyw ddifrod neu oblygiadau a achosir trwy ymweld â chysylltiadau allanol.

Mae cyfathrebu, ymgysylltu a chamau gweithredu trwy’r cyfryngau cymdeithasol allanol yr ydym yn ymwneud â hwy yn gysylltiedig â’r telerau a’r amodau yn ogystal â’r polisïau preifatrwydd a gynhelir gan bob cyfrwng cymdeithasol yn y drefn honno.

Cynghorir defnyddwyr i ddefnyddio’r cyfryngau cymdeithasol yn ddoeth a chyfathrebu / ymgysylltu â hwy yn ofalus, yng nghyswllt eu preifatrwydd a’u manylion personol eu hunain. Ni fyddwn byth yn gofyn am wybodaeth bersonol na sensitif drwy’r cyfryngau cymdeithasol ac rydym yn annog defnyddwyr sy’n dymuno trafod manylion sensitif i gysylltu â ni trwy gyfrwng sianeli cyfathrebu sylfaenol megis dros y ffôn neu ar e-bost.

• Deddf Diogelu Data 2018
• Polisi Preifatrwydd Google
• Polisi Preifatrwydd Twitter
• Polisi Preifatrwydd Facebook
• Polisi Preifatrwydd Instagram.

Os oes gennych unrhyw ymholiadau pellach, mae croeso i chi gysylltu â ni drwy cyswllt@gofalwn.cymru

Through our media campaigns, events and other projects we often ask consent to capture photos/videos or stories for the benefit of promoting our work, good practice and developments within the sector. Consent would be gained through completion of the appropriate form(s). If you consent to this you are able to specify how we can use your information and in what format i.e. social media, on-line on our website, press stories, in our printed literature and promotional material. On some occasions we use third party/suppliers to carry out this process and all data sharing would be controlled with contract and/or data sharing agreement.

Information held may include:

• personal stories
• photos
• videos
• contact information from you solely for the purpose of communicating with you in relation to this matter.

The purpose of holding this information is to:

• promote our work and services
• to assist with the training and development needs of the workforce.

This information may be shared with:

• the general public via social media, our website and resources.

Your personal information and associated consent is kept by us and may be used in the formats you have agreed for as long as seven years. Should you wish to revoke your consent at any point during that period, you can do so by contacting FOI@socialcare.wales 

You should be aware that where your information is shared, with your consent with a third party, such as the press on put on social media, the Privacy Notice and retention period of the relevant third party will apply and we have no control over this.

Within the WeCare Wales jobs portal (www.wecare.wales/jobs) visitor information is only stored as anonymous data and within the Cookie settings and permissions granted by the user.

Registered employer's details are retained as part of the registration process and stored in line with our data storage policy[AB1] .

We hold:

• employer’s name
• contact details
• organisation’s name
• organisations offerings (for example apprenticeship schemes, work placements).

We hold this information to:

• verify organisations
• verify job postings
• share employer’s offerings on our website.

We hold:

• names
• contact details
• job role (if applicable)
• place of employment
• access requirements
• dietary requirements.

We hold this information to:

• manage our events
• assist with training and development
• gain feedback on our existing and future work
• to keep you informed and updated of current and future work.

We do not share this information, but on occasion utilise third party software to send details, manage the bookings and circulate surveys. All third party software is compliant with the Data Protection Act 2018.

We may also, at times, use a third party facilitator to lead meetings or forums. Any access to data will be managed by our contract with the facilitator and they will be expected to sign a confidentiality agreement as part of that process.

In order to enable event attendees to network effectively at our events, we may share delegate lists. Let us know if you do not wish your details to be shared.

We hold:

• names
• contact details
• place of employment
• CCTV footage.

We hold this information to:

• manage our security and health and safety obligations. We hold use visitor registers at both our Cardiff and St Asaph offices which are used for roll call following evacuation e.g. in the event of a fire.
• we record CCTV images of people entering and leaving our premises as well as strategic positions surrounding the building. This information is recorded for security monitoring and the investigation of alleged criminal offences. The images may be shared as part of disciplinary matters or with law enforcement and courts as needed.

Where we are not the sole occupier of the building (Cardiff Office) there is additional CCTV which is controlled by the building owners.

We hold:

• personal details
• contact details
• nature of complaint.

We hold this information to:

• comply with our statutory requirement to manage complaints.

We do not share this information externally although we may publish anonymised statistics and details about complaints.

We retain the content of the complaint permanently as a corporate record.

We use Clobba software provided by Code Software UK ltd for our General Enquiries telephone system. The software used meets the requirements of ISO27001.

Only code engineers have access to customer data on a need to know basis for set up and support purposes.

Code Software systems and data are hosted in Microsoft Azure hosted data centres in the EU.

Code software are registered with the Information Commissioner and are compliant with UK Data Protection Act 2018 and GDPR.

The retention period for data is currently two years or deletion on request.

The information collected includes:

• calls (voice, Video and Audio Conference)
• call detail records
• name, email address, department, title
• all Teams meetings details including chats
• app sharing.

This information is used for:

• responding to enquiries
• performance reporting
• providing IT/ call management assistance as and when required.

Where activity is commissioned to a third party/supplier all appropriate data shared would be controlled within an established contract or a data sharing agreement.

We may hold:

• personal details
• information submitted by the person involved in the activity.

We may hold this information to:

• carry out the requirements within the activity.

We may also share anonymous data with third parties for research purposes but any research projects must meet the criteria of our Research Support and Engagement Framework before it can be shared. The findings of any research projects using our anonymous data will be published on our website.

We hold:

• personal information
• contact details.

We hold this information to:

• comply with statutory requirements
• process requests for information
• compile statistics.
• consider if our publication scheme is sufficient.

We keep the content of these requests for the following time:

• freedom of Information requests that are still classed as open are kept for one year. Documents which are subsequently opened are kept for two years.
• freedom of information requests which have been closed are kept for 10 years.
• Subject Access Requests are kept for five years.

We might share this information with:

• the Information Commissioner’s Office
• the public when we publish Freedom of Information requests and responses on our website, although such information is publish anonymously.

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work more efficiently, as well as to provide analytical information to the owners of the site.

We use Civic Cookie control to manage cookie permissions.

Consent mode, the consent state and Civic is managed within Google Tag Manager (GTM)

By default, consent mode is set to deny as any page loads on our sites. Until a preference has been made no cookies will be placed on the

users browser and the Civic cookie banner will remain present

On first visit, you are presented with the option to set your

preferences and can accept or reject cookies in their preferred

language using Civic.

The Civic cookie banner will provide users with information about the

categories of cookies are used on the site and allow them to set their

preferences for each category

• You can update their cookie preferences at any point during a visit
• Preferences made in Civic are recorded by Civic
• User preferences made in Civic update the consent state in GTM
• Updates to the consent status (accept/deny) will allow/block tags in