Data Protection and Privacy Policy

Thank you for visiting our website. Singapore Red Cross (SRC) is committed to ensuring that personal information is protected and managed in accordance with Singapore laws, international good practice and individuals’ rights. We collect and use personal information in order to help us offer individuals appropriate information on our programmes and initiatives.

Note: The privacy practices set forth in this privacy policy apply only to this website. If you are connected to another website from here, please review the privacy policies posted at those sites.

Data Protection Policy

The Personal Data Protection Act 2012 (“PDPA”) establishes a data protection law that governs the collection, use, disclosure and care of personal data.

SRC recognises that the privacy of your personal data is important to you. SRC is committed to treat all personal data with due confidentiality, in accordance with the relevant data protection laws of Singapore. SRC’s Data Protection Policy aims to help you understand how we collect, use, share and protect your personal data.

Personal Data

In this Data Protection Policy, “Personal Data” refers to any data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which we have or are likely to have access, including data in our records as may be updated from time to time. By volunteering or knowingly providing your personal data to SRC , it will be deemed that you have agreed and consented to the collection, use and disclosure of your personal data by SRC Providing us with your Personal Data is voluntary. However, if you choose not to provide us with the Personal Data described in this Policy, we may not be able to fulfill our contractual duties towards you or facilitate your request or provide the service to you.

Collection, Usage and Disclosure of Personal Data with Consent

When asking for your personal information, the SRC is committed to the following:

explaining why we need personal information and only asking for the information we need
protecting the information we are given and making sure that only those who need access are able to do so
only sharing the information within the SRC and with other organisations where such sharing is necessary or where we have the individual’s consent.

Fresh consent shall be obtained before collecting any additional personal data, or before using existing personal data collected for a purpose which has not yet been notified to you. SRC shall communicate the need to collect additional personal data, or use existing personal data for any new and previously unnotified purpose, to you, within thirty(30) days of the new purpose arising, via your preferred communication channel, and obtain your consent, before proceeding to collect the required additional personal data, or use existing personal data for the new purpose.

Collection

SRC collects only the relevant data required for the following:

When you sign in on our websites
When you subscribe to our newsletters
When you participate in our marketing campaigns
When you register for our events or programmes
When you submit your resume for job applications
When you contact us to share your stories
When you provide us with your details at events, campaigns and meetings

Usage
SRC may use your information for the following purposes:

To contact you for programmes which you have signed up for
To inform you about programme updates
To respond to enquiries pertaining to our programmes
To respond to your job application
To send newsletters which you have subscribed to

SRC may use your photographs for publicity purposes on our various platforms.
We will not use your personal data for purposes other than what we have informed you or which are permitted under local laws and regulations.
We will not offer or share your personal data with third parties outside of Singapore Red Cross for commercial purposes, without seeking your consent.
We will not disclose your personal data to third parties unless requested by relevant government or law enforcement agencies to comply with any laws, rules, guidelines and regulations or schemes imposed by any governmental authority.

Disclosure

We may disclose your data to third parties in order to facilitate our programmes and initiatives. We would work closely with such third parties, and adopt appropriate security measures in collaboration with them to ensure that your information remains secure and confidential.
SRC may disclose your information for the following purposes:
If you have signed up with SRC in our programmes, we may share your information with:

Travel agencies\Airlines for flight booking purposes
Hotels for room reservation purposes
Insurance companies for insurance coverage
Government agencies which require security clearance
Partners assisting SRC with logistics and programme facilitation
Clinics/Hospitals for medical assessment

We may also share information with government agencies or other companies assisting us in fraud prevention or investigation. We may do so when: (1) permitted or required by law; or, (2) trying to protect against or prevent actual or potential fraud or unauthorized transactions; or, (3) investigating fraud which has already taken place.

Protection

To safeguard your personal data, all electronic storage and transmission of personal data are protected with security technologies.

Collection, Usage and Disclosure of Personal Data without Consent

Below are some of the circumstances under which our staff may collect, use or disclose personal data about an individual without the individual’s consent. This is permitted under the PDPA:

First Schedule -Collection, Use and Disclosure of Personal Data without Consent
Second Schedule-Additional Bases for Collection, Use and Disclosure of Personal Data without Consent

It is likely that consent for the collection, use or disclosure of personal data cannot be obtained in a timely manner, and that the affected individual would not reasonably be expected to withhold consent.

Vital Interests Of Individuals	where it is necessary for any purpose that is clearly in the interest of the individual and consent for its collection, use or disclosure (as the case may be) cannot be obtained in a timely way or the individual would not reasonably be expected to withhold consent the collection is necessary to respond to an emergency that threatens the life, health or safety of the individual or another individual is for the purpose of contacting the next-of-kin or a friend of any injured, ill or deceased individual
Matters Affecting Public	the personal data is publicly available is in the national interest is solely for artistic or literary purposes is solely for archival or historical purposes, if a reasonable person would not consider the personal data to be too sensitive to the individual to be collected, used or disclosed (as the case may be) at the proposed time the personal data is collected, used or disclosed (as the case may be) by a news organisation solely for its news activity
Legitimate Interests	is necessary for any investigation or proceedings is necessary for evaluative purposes is necessary for the organisation to recover a debt owed to the organisation by the individual or for the organisation to pay to the individual a debt owed by the organisation is necessary for the provision of legal services by the organisation to another person or for the organisation to obtain legal services is for the purpose of the preparation by a credit bureau of a credit report or relates to credit report provided by a credit bureau to a member of the credit bureau in relation to a transaction between the member and the individual is to confer an interest or a benefit on the individual under a private trust or benefit plan and administer that trust or benefit plan, at the request of the settlor or the person establishing the benefit plan, as the case may be is provided to the organisation by another individual to enable the organisation to provide a service for the personal or domestic purposes of that other individual the personal data is included in a document produced in the course, and for the purposes, of the individual’s employment, business or profession; and collected, used or disclosed for purposes consistent with the purposes for which the document was produced the personal data is collected, used or disclosed by the individual’s employer and is reasonable for the purpose of or in relation to the organisation entering into an employment relationship with the individual or appointing the individual to any office or managing or terminating an employment relationship with or appointment of the individual business asset transactions business improvement purposes

Obtaining Consent from a Person Validly Acting on Behalf of an Individuals

Section 14(4) of the PDPA provides that consent may be given, or deemed to have been given, by any person validly acting on behalf of the individual for the collection, use or disclosure of the individual’s personal data. Regulations issued under the PDPA will also provide for some specific situations in which an individual person may give consent on behalf of another. We will verify the authenticity of the person via asking for a letter of authorization from the individual concerned, or telephone or email verification with the individual concerned, depending on the circumstances of the situation. Only when this is completed will we proceed to seek consent. Wherever applicable, individuals submitting another individual’s personal data to SRCS should obtain the consent of the latter before doing so, such as the case of job referee or next-of-kin.

Withdrawal of Consent, Access and Correction of your Personal Data

You also have the right to withdraw any consent that you have given to us. Please let us have any notice of withdrawal in writing, indicating your instructions clearly via email to the Data Protection Officer. If you withdraw your consent for the collection, use or disclosure of your personal data, we will put the withdrawal into effect within thirty (30) working days of your request. Do note that SRC will not be able to process any task or request which requires the employment of your personal data.

If you:

have any question or feedback relating to your Personal Data or our Data Protection Policy;
would like to withdraw your consent to any use of your Personal Data as set out in this Data Protection Policy; or
would like to obtain access and make corrections to your Personal Data records,

please contact us at dpo@redcross.sg

Cookie/Tracking Technology

The Site may use cookie and tracking technology depending on the features offered. Cookie and tracking technology are useful for gathering information such as browser type and operating system, tracking the number of visitors to the Site, and understanding how visitors use the Site. Cookies can also help customise the Site for visitors. Personal information cannot be collected via cookies and other tracking technology, however, if you previously provided personally identifiable information, cookies may be tied to such information. Aggregate cookie and tracking information may be shared with third parties.

Commitment to Data Security

Your personally identifiable information is kept secure. Only authorised employees, agents and contractors (who have agreed to keep information secure and confidential) have access to this information. All emails and newsletters from this site allow you to opt out of further mailings.

Contact Information

If you have any questions, concerns, or comments about our privacy policy, please contact us at dpo@redcross.sg or 6664 0500.

We reserve the right to make changes to this policy. Any changes to this policy will be posted.