General Data Protection Regulation
The General Data Protection Regulation (GDPR), a binding European Union (EU) law governing data protection and privacy for citizens and residents of the EU and the European Economic Area, will go into force on May 25, 2018. GDPR, a robust privacy framework, aims to give more control to individuals over their personal data. Businesses and others collecting data must ensure that full disclosures are made and consent is freely given by the individuals whose data is being collected.
GDPR grants individuals six specific rights with respect to their data including: (1) information and access (i.e., to know that their personal data is being processed
and have access to this data free of charge); (2) data portability (data collected under certain circumstances must be provided “in a structured, commonly used, and machine-readable form”; (3) rectification (ability to correct inaccurate personal data or to complete information); (4) erasure (also known as the “right to be forgotten,” applicable only under certain circumstances); (5) restriction (individual may restrict data controller from processing data further under certain circumstances); and (6) objection (to object to processing of one’s data). EU General Data Protection Regulation Privacy Notice For Wyandanch Public Library
This Privacy Notice applies to Wyandanch Public Library and is intended to comply with the European Union’s (“EU”) General Data Protection Regulation (“GDPR”). This Privacy Notice applies to personal data that WPL collects or processes about an individual (“Data Subject”) while the Data Subject is located in the EU, regardless of whether the Data Subject is a citizen or permanent resident of an EU country. “Personal Data” means any information relating to an identified or identifiable Data Subject.
Lawful Basis or Bases for Collecting and Processing Personal Data Wyandanch Public Library’s lawful basis or bases for collecting and processing personal data include the following:
■ Processing is necessary for the legitimate interests pursued by Wyandanch Public Library or third parties in providing access to the Library’s resource materials and electronic databases.
■ Processing is necessary for the performance of a contract to which the Data Subject is party or in order to take steps at the request of the Data Subject prior to entering into a contract.
■ Processing is necessary for compliance with a legal obligation to which Wyandanch Public Library is subject.
Types of Personal Data Collected/Processed and Purpose The Wyandanch Public Library collects the following categories of Personal Data in order to provide a modern Library Management System (Alma from Ex Libris):
■ Name
■ Contact information including, without limitation, email address, physical address, phone number, and other location data
■ Unique personal identifiers
■ Library loan transactions
■ Library service transactions
If you have specific questions regarding the collection and use of your Personal Data, please contact the Library Director at (631) 643-4848. If a Data Subject refuses to provide Personal Data that WPL requires in connection with one of WPL’s lawful basis or bases for collecting such Personal Data, such refusal may make it impossible for WPL to provide education, employment, research or other requested services.
Where Wyandanch Public Library gets Personal and Sensitive Personal Data WPL receives personal and sensitive Personal Data from multiple sources. Most often, WPL gets this data directly from the Data Subject or under the direction of the Data Subject who has provided it to a third party for example, the Library’s room reservation system to which the Data Subject self-submits an email address.
Individual Rights of the Data Subject under the GDPR In addition to the right to receive the information provided in this Privacy Notice, Data Subjects covered by this Privacy Notice have the right to:
■ Request from Wyandanch Public Library access to and rectification or erasure of Personal Data or restriction of processing concerning the Data Subject, the right to object to processing and the right to portability of Personal Data;
■ Where processing is based upon consent, to withdraw consent at any time, without affecting Wyandanch Public Library’s right to process Personal Data based upon consent before its withdrawal;
■ The right to file a complaint with a supervisory authority appointed by an EU member state for the purpose of receiving complaints;
■ Additional notice of the existence of automated decision-making, including profiling;
■ If the Personal Data is going to be further processed for a purpose other than that for which it was collected, then notice of the purpose and basis or bases for the further processing;
■ If Personal Data is collected for WPL’s legitimate interests or for a task carried out in the public interest, then the Data Subject has the right to object, on the grounds of his or her particular situation, to the processing of Personal Data concerning him or her (including profiling);
■ Where Personal Data are processed for direct marketing purposes, the right to object at any time to processing Personal Data concerning him or her for such marketing; and
■ Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her; provided, however, that this right does not apply if the decision is (a) necessary for entering into, or performance of, a contract between the Data Subject and Oakland University; or (b) is based upon the Data Subject’s consent.
Note: Exercising these rights guarantees access to a process but does not guarantee any particular outcome.
Any Data Subject who wishes to exercise any of the above-mentioned rights may
do so by filling such request with the Library Director at (631) 643-4848.
Cookies
Cookies are files that many websites transfer to users’ web browsers to enable the site to deliver personalized services or to provide persistent authentication. The information contained in a cookie typically includes information collected automatically by the web server and/or information provided voluntarily by the user. Wyandanch Public Library’s website uses persistent cookies in conjunction with a third party technology partner to analyze search engine usage and web traffic patterns. This information is used in the aggregate to monitor and enhance our web pages. It is not used to track the usage patterns of individual users.
Wyandanch Public Library will not share your Personal Data with third parties except:
■ as necessary to meet one of its lawful purposes, including but not limited to, its legitimate interest, contract compliance, pursuant to consent provided by the Data Subject, or as required by law;
■ as necessary to protect Wyandanch Public Library’s interests;
■ with service providers acting on Wyandanch Public Library’s behalf who have agreed to protect the confidentiality of the Personal Data.
