BBC Children in Need (“we”, “us” and “our”) is working with McDonald’s to enable youth services projects and organisations to connect with, and receive support from, a McDonald’s restaurant (referred to as the “Connection Initiative” in this privacy notice).

This privacy notice explains how BBC Children in Need, as a data controller of your personal data, will process your personal data if you participate in the Connection Initiative, whether you are an individual working on behalf of a youth services project or organisation (“Youth Services Worker”) or an individual working in a McDonald’s restaurant (“McDonald’s Restaurant Worker”).

BBC Children in Need is a company limited by guarantee (number 04723022) and a charity registered in England and Wales under number 802052 and in Scotland under number SC039557.

What information do we process and how do we use it?

For Youth Services Workers:

This section applies to you if your contact details have been provided to us on an expression of interest form as the “Nominated Contact” of a youth services project or organisation. You will either have provided these details to us yourself, or your details will have been provided to us by your colleague and you will have received an email confirming the same. References below to “you” or “your” are to the Nominated Contact.

· If a youth services project or organisation completes an expression of interest from, we will process:

o your contact details (name, phone number and email address) to send you connection requests from one or more McDonald’s restaurants, notify you of successful or unsuccessful connection requests and provide you with further information before you progress with a successful connection;

o the name of the organisation you work for and its postcode to enable us to identify your organisation as one which is available to be connected with a McDonald’s restaurant. We use your organisation’s postcode to display local youth services projects or organisations to a McDonald’s restaurant on our youth services projects and organisations portal;

o additional information about your organisation, including the work it does, if your organisation is the recipient of grant funding and if it has any prior connection with a McDonald’s restaurant – while this information is not your personal data, we may use your contact details to discuss this information further with you.

· We will share your contact details with McDonald’s and the named contact for that McDonald’s restaurant only if you agree to be connected with a McDonald’s restaurant following a connection request by email. In these circumstances McDonald’s will be a data controller of your personal data for any future processing. For more information about how McDonald’s processes your personal data please see https://www.mcdonalds.com/gb/en-gb/privacy-policy.html.

· We may reach out to you (which may be via our learning and evaluation partner) to discuss the success of your connection with a McDonald’s restaurant, to send you a survey in respect of the same, and/or about any opportunities we may be exploring to promote and/or publicise the Connection Initiative and the positive impact it has had on the children and young people your project or organisation supports. If we choose to do this, we’ll provide you with further information at that time about how we will use your personal data and obtain any necessary permissions for promotional and/or publicity purposes.

· If you get in touch with us to discuss the Connection Initiative, we will process any personal data you choose to disclose to us in order for us to respond to your question or concern.

For McDonald’s Restaurant Workers:

· If you wish to connect with a youth services project or organisation, you will be asked to provide your contact details (name and work email address) so we can inform you if such a request is successful or not and provide you with further information before you progress with a successful connection.

· If you get in touch with us to discuss the Connection Initiative, we will process any personal data you choose to disclose to us in order for us to respond to your question or concern. We recommend in the first instance reaching out to McDonald’s.

BBC Children in Need is not responsible for safeguarding policies and procedures in respect of the Connection Initiative; these policies and procedures are the responsibility of the youth services projects and organisations and McDonald’s. If you choose to disclose any information regarding safeguarding concerns to BBC Children in Need, we will process such information as explained in our privacy notice under the “Grantees” section. For the purpose of the Connection Initiative, this information applies irrespective of whether you are a Grantee or not.

Our lawful basis to process your information

The legal basis on which BBC Children in Need processes your personal data in connection with the Connection Initiative is that it is in our legitimate interests to connect McDonald’s restaurants with youth services projects for the benefit of children and young people, to further BBC Children in Need’s charitable aims and objectives and to reach out to you to discuss the success of your connection. We do not believe this unreasonably impacts on your rights and freedoms. You may object to such processing by exercising your legal rights (as explained below).

Who do we share your information with?

Apart from sharing Youth Services Workers contact details with McDonald’s (as explained above), we will not share personal data with any third party except those that assist BBC Children in Need in providing its services and the Connection Initiative, including our website hosting provider, email services provider, CRM system and Microsoft (where we ask you to complete a Microsoft form). We may also share your contact details with our learning and evaluation partner for the purposes of contacting you to discuss the success of your connection with a McDonald’s restaurant.

International transfer of your information

We process and store your information in the UK or EU.

How long do we keep your information?

We will retain your personal data for no longer than 24 months in respect of the Connection Initiative. If you wish to withdraw from the Connection Initiative, please contact us using the details below.

Your rights and more information

If your contact details have been provided to us by a colleague and you no longer wish to participate in the Connection Initiative, please contact us at [email protected]. You’re welcome to get in touch with us to discuss your information at any time.

Please see our privacy policy for details of the rights you have. These are explained further under “Managing your information”.

If you have any worries or complaints about the way we use your information, please don’t hesitate to get in touch with us. We’ll do our very best to set your mind at rest or put things right. And if, for whatever reason, you feel we’re not meeting the exceptionally high standards we expect of ourselves, you’re within your rights to tell the UK Information Commissioner’s Office (ICO).