Privacy Policy

We regularly review our privacy practices for our various activities, and update our policy. Please check this website on an on-going basis for information on our most up-to-date practices.

The Young Men’s and Young Women’s Christian Association of Winnipeg Incorporated (“The YMCA-YWCA”) respects the right of individuals to the protection of their personal information.

Protecting the Privacy of Personal Information

The YMCA-YWCA is committed to maintaining the confidentiality, privacy, and accuracy of personal information it collects, uses and discloses about its participants, members, donors, parents, staff, volunteers and independent contractors. People are concerned about their ability to exercise a substantial degree of control over the collection, use and disclosure of their personal information.

Personal information is information about an identifiable individual. Examples of personal information include, but are not limited to: name, address, gender, age, ID numbers, income, racial or ethnic origin, relationship status, employee files, payment or medical/health records, video surveillance records, photographs, assessments or evaluations.

An individual’s name does not need to be attached to the information in order for it to qualify as personal information.

Personal information does not include name, title, business address, or business phone number of an employee of an organization.

YMCA-YWCA staff and volunteers having access to personal information must follow the ten fair information principles and steps for implementing these principles, in keeping with privacy laws.

Principle 1 – Accountability

The YMCA-YWCA is responsible for personal information under its control and shall designate an individual (Privacy Officer) or individuals who are accountable for YMCA-YWCA compliance with established privacy principles. Vice Presidents and Managers are responsible for and shall oversee compliance by their staff with YMCA-YWCA privacy protection procedure and fair information principles, to ensure:

Purposes are defined for collection of personal information;

Consents are obtained;
Collection, use and disclosure of personal information is limited;
Information used is accurate, complete and up-‐to-date;
Adequate safeguards protect personal information in YMCA-YWCA’s control;
Retention and destruction timetables are maintained;
Access requests by individuals are processed promptly;
Timely response is provided to an inquiry or complaint regarding YMCA-YWCA handling of personal information.
Contracts with third parties that process YMCA-YWCA information shall include privacy protection requirements.

Supervisors are responsible for the day-to-day collection, processing and safeguarding of personal information under their control. Supervisors shall inform and train staff, and volunteers having access to personal information, on YMCA-YWCA privacy protection procedure and information handling practices.

Staff and relevant volunteers shall follow the privacy protection procedures established by the YMCA-YWCA when collecting, using, disclosing and safeguarding personal information.

Upon request by an individual, staff and volunteers shall make known contact information for a Vice President or Manager to whom inquiries or complaints can be forwarded about our YMCA-YWCA privacy protection procedure and practices. The Privacy Officer will provide assistance when a more detailed knowledge of the organization’s responsibilities is required.

The contact information of the Privacy Officer for the YMCA-YWCA is provided below:
Vice President, Finance & Administration
3550 Portage Avenue, Winnipeg MB R3K 0Z8
Telephone 204.889.8052
Email [email protected]

Principle 2 – Identifying Purposes

The YMCA-YWCA shall identify the purposes for collecting personal information before or at the time personal information is collected.

The YMCA-YWCA needs to collect, use and disclose some information about its members, participants, parents, donors, staff and volunteers, in order to conduct its operations, and deliver YMCA-YWCA programs and services to the communities it serves.

The YMCA-YWCA’s purposes for collecting personal information are:

To establish and maintain responsible relationships with its members, participants, parents, donors, staff and volunteers;
To manage, develop and enhance YMCA-YWCA operations, programs and services;
To acknowledge gifts, issue tax receipts, and other administrative requirements including information requests;
To process and collect fees for service;
To assess participant needs;
To determine program, service, employment or volunteer eligibility;
To provide safe and secure YMCA-YWCA environments;
To collect data for statistical purposes;
To better understand the changing needs of communities we serve;
To communicate a range of programs, services, and philanthropic opportunities that benefit people we serve;
To meet legal, regulatory and contractual requirements.

As a member or program participant of the YMCA-YWCA of Winnipeg, you may receive:

Information packages pertaining to members
Information to keep you informed and up to date on the activities of the YMCA-YWCA, including programs, services and special events
Membership renewal notices
Fundraising requests
Electronic newsletters
Opportunities to volunteer
Tax receipts

If, at any time, you wish to be removed from any of these contacts, simply call 204.832.7002 or email [email protected] and we will gladly accommodate your request.

The YMCA-YWCA shall indicate either orally, electronically or in writing, at or before the time personal information is collected, the purpose for which it is being collected.

Staff and volunteers collecting personal information shall use reasonable efforts to explain identified purposes, or refer the individual to a supervisor who shall explain the identified purposes for collecting personal information.

Unless required by law, staff and volunteers shall not use or disclose for any new purpose personal information that has been collected, without the consent of the individual. Staff shall advise their Vice President or Manager of a potential new identified purpose. Any new identified purpose must be approved by a Vice President, documented and consent obtained from individuals prior to YMCA-YWCA use or disclosure.

Principle 3 – Consent

The knowledge and consent of an individual is required for the collection, use, or disclosure of personal information, except where not required by law (see Exceptions). In obtaining consent, staff and volunteers shall advise participants, members, parents, donors, staff, volunteers, independent contractors of identified purposes for which personal information will be used or disclosed. Purposes shall be communicated in clear, understandable language.

The YMCA-YWCA takes into account the sensitivity of the personal information when determining what form of consent is appropriate for the circumstances.

In general, the following actions by an individual constitute implied consent for the YMCA-YWCA to collect, use and disclose personal information for purposes identified to the individual:

Registration for YMCA-YWCA programs and services;
Completion of a donation pledge form;
Acceptance of employment and benefits enrolment by an employee;
Acceptance of a volunteer position.

For most YMCA-YWCA employment and community service programs, the YMCA-YWCA is obligated by its contract with the government to obtain the express written consent from a participant to collect, use and disclose their personal information. Express consent is required from an individual when dealing with more sensitive information, such as financial, criminal and medical data. Speak with your supervisor for more information about when express consent is required in your program or service area.

Individuals may at any time withdraw their consent to the YMCA-YWCA’s use or disclosure of their personal information, subject to certain service, legal or contractual restrictions. Individuals wishing to withdraw consent may contact the YMCA-YWCA for more information regarding the implications of withdrawing consent.

Exceptions

YMCA-YWCA may collect, use or disclose personal information without prior knowledge or consent of the individual in the following limited circumstances:

To a lawyer or other legal representative of the YMCA-YWCA, when legal advice is required by the organization;
To a government body or agency in certain circumstances;
To collect a debt, or comply with a subpoena, warrant or other court order, or as may be otherwise required by law;
When the collection, use or disclosure of personal information is permitted or required by law.
When the personal information is available from a public source (e.g., a telephone directory);
In an emergency that threatens an individual’s life, health, or personal security;
To protect ourselves from fraud;
To investigate an anticipated breach of an agreement or a contravention of law
For more information about consent and disclosure, please speak with your Vice
President or Manager.

Principle 4 – Limiting Collection

The YMCA-YWCA shall take reasonable steps to limit the collection of personal information to that which is necessary for the purposes identified by the YMCA-YWCA. Information shall be collected by fair and lawful means.

When collecting personal information, staff and volunteers will usually collect it directly from the individuals about whom the personal information pertains.

Personal information may be collected from other sources with prior consent from the individual, for example, from prior employers, personal references or from other third parties having the right to disclose the information.

Principle 5 – Limiting Use, Disclosure, and Retention

The YMCA-YWCA shall not use or disclose personal information for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information shall be retained for at least a year and after which for only as long as necessary for the fulfillment of those purposes. In certain circumstances personal information can be collected, used or disclosed without the knowledge and consent of the individual. See Exceptions above under Principle 3 - Consent.

Personal information used to make a decision that directly affects an individual must be retained for at least one year, after which it shall be retained only as long as necessary for the fulfillment of those purposes for which it was collected, or as required by law, or by contract with a funding partner.

Depending on the circumstances, where personal information has been used to make a decision about an individual, the YMCAYWCA shall retain, for a period of time that is reasonably sufficient to allow for access by the individual, either to actual information or the rationale for making the decision.

Supervisors shall maintain schedules for records retention and destruction, which apply to personal information that is no longer necessary or relevant for the identified purposes for collection, or required to be retained by law or under contract. Such information shall be destroyed, erased or rendered anonymous.

Speak with your Vice President or Manager for more information on records retention and destruction requirements for your program or service area.

Principle 6 – Accuracy

Personal information shall be as accurate, complete and up-‐to-date as is necessary for the purposes for which it is to be used. Personal information used by the YMCA-YWCA shall be sufficiently accurate, complete and up-to-date to minimize the possibility that inaccurate information is being used to make a decision about an individual. If staff and volunteers are aware of any inaccuracy or changes in their personal information that the YMCA-YWCA holds about them, please contact the Human Resources department or staff contact if a volunteer.

Staff members handling personal information shall update personal information about participants, members, donors, staff, volunteers, independent contractors, as and when necessary. Speak with your supervisor or Vice President or Manager if you have questions about correction requests or on how accurate, complete and up-to-date personal information needs to be.

Principle 7 – Safeguards

The YMCA-YWCA shall protect personal information by security safeguards appropriate to the sensitivity of the information. All staff and volunteers with access to information shall be required as a condition of employment or volunteer role, to respect the confidentiality of personal information.

The more sensitive personal information is, the more security is required. Speak with your supervisor or Manager for more information on safeguards appropriate to the sensitivity of personal information in your program or service area. Staff shall protect personal information in their control (regardless of format) against such risks as loss or theft, unauthorized access, disclosure, copying, use, modification or destruction, through appropriate security safeguards. Safeguards may include physical measures (such as locked doors, locked file cabinets), organizational measures (such as staff training, limited access, security clearances) and technological measures (such as passwords, anti-‐virus software for computer systems). See Personal information shared with a third party for processing shall be protected through contractual agreements with requirements for confidentiality and appropriate safeguards.

Website and Electronic Commerce

We use password protocols and encryption software to protect personal and other information we receive when a program or service is requested and/or paid for online. Our software is routinely updated to maximize protection of such information.

Links to Third-‐Party Sites

We provide links from our website to third party websites. The YMCA-YWCA of Winnipeg does not control these websites and therefore we would encourage you to review their privacy policies.

Principle 8 – Openness

The YMCA-YWCA shall make readily available to individuals, information about its procedures and practices relating to the management of personal information.

Information on the YMCA-YWCA’s commitment to privacy is available to the public on the YMCA-YWCA’s web site at ywinnipeg.ca

Staff and volunteers shall make known upon request the contact information for the respective Vice President or Manager to whom inquiries or complaints can be forwarded.

Principle 9 – Individual Access

The YMCA-YWCA shall upon request inform an individual of the existence, use and disclosure of his or her personal information and shall give the individual access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate. Staff members and volunteers shall refer requests about personal information held about an individual to a supervisor or Manager.

Staff members shall immediately inform their supervisor or Manager of a request for access by an individual to his or her personal information collected by the YMCA-YWCA. The Manager shall respond to a written request for individual access by providing access to the individual’s data, except in limited circumstances. See Exceptions to Access below.

In order to safeguard personal information, an individual may be required to provide sufficient identification information to permit YMCA-YWCA to account for the existence, use and disclosure of personal information, and authorize access to the individual’s file. The Manager shall respond to a written request for access in a reasonable time, and at minimal or no cost. Personal information shall be provided in a format that is understandable, along with any explanation needed to facilitate the individual’s understanding.

The Manager or designate shall provide the individual a reasonable opportunity to review and challenge the accuracy and completeness of personal information. A statement of disagreement will be attached to records where a requested amendment cannot be made.

Upon request, the Manager shall provide an account of the use and disclosure of personal information. A list of organizations to which the YMCA-YWCA may have disclosed personal information shall be provided. Staff can request access to their employee file by contacting the Human Resources department.

Exceptions to access

The YMCA-YWCA may not be able to provide an individual with access to some or all of his or her personal information in certain circumstances permitted by law. Some exceptions include if:

Doing so would likely reveal personal information about a third party;
Disclosure could reasonably be expected to threaten the life or security of another individual;
Information was collected in relation to the investigation of a breach of an agreement, or a contravention of law, or as otherwise permitted by law.
If access to personal information cannot be provided, the Manager shall provide the individual with written reasons for denying access.

Principle 10 – Challenging Compliance

An individual shall be able to address a challenge concerning compliance with the above principles to the designated persons accountable for YMCA-YWCA compliance.

Staff and volunteers shall refer any inquiries or complaints about YMCA-YWCA’s handling of personal information, to their Manager or Vice President for response in a fair and timely manner. Individuals may contact the Privacy Officer to discuss their question or concern about YMCA-YWCA information handling practices.

Individuals wishing to make a complaint about YMCA-YWCA information handling practices, will be asked to provide in writing to the Privacy Officer, the following information:

Name and address or fax number where the individual prefers to be reached
Nature of the complaint and relevant details
If applicable, the name of the YMCA-YWCA staff with whom the individual has already discussed the issue.

The YMCA-YWCA shall investigate all complaints. If a complaint is found to be justified, the YMCA-YWCA shall take appropriate measures to resolve the complaint.

Updating of Privacy Policy

The YMCA-YWCA of Winnipeg regularly reviews our privacy practices for our various activities, and update our policy. Please check our website on an on-going basis for information on our most up-to-date practices.

How do I get more information?

Our staff members will be happy to answer any questions you may have about your personal information. If you would like more information about our policies, or you would like to see exactly what personal information we have about you in our records, or you wish to register a complaint, please contact:

Vice President of Finance & Administration
204-889-8052
[email protected]
3550 Portage Avenue, Winnipeg MB R3K 0Z8

You can also contact the Office of the Privacy Commissioner of Canada for assistance between the hours of 9 am and 5 pm, at:

Toll-free: 1-800-282-1376
Phone: (613) 995-8210
Fax: (613) 947-6850
TTY: (613) 992-9190

or by mail at: 112 Kent Street Place de Ville Tower B, 3rd Floor Ottawa, Ontario K1A 1H3

or on the Web at: http://www.privcom.gc.ca/