Privacy Policy

This website provides information about the Gibraltar Jewish Community and its religious, educational, charitable and communal activities. The board behind the website project is The Jewish Managing Board of Gibraltar.

[REVIEW: Confirm that The Jewish Managing Board of Gibraltar is the legal organisation responsible for deciding how website visitors' and enquirers' personal information is used. If another organisation is the data controller, replace or clarify this statement.]

For questions about this policy or the use of your personal information, contact info@jewish.gi.

[REVIEW: Confirm that info@jewish.gi is the correct privacy contact and add the Board's postal contact address.]

This notice covers information handled through this website and related website enquiries. Other community services or institutions may have their own privacy notices.

When you contact us through the website or by email, we receive the information you provide. This may include your name, email address, telephone number if supplied, and the contents of your enquiry.

Your message may also contain information about other people. Please only provide information that is relevant to your enquiry and that you are entitled to share.

[REVIEW: Confirm the exact contact-form fields and whether attachments, booking details, newsletter subscriptions or other information are collected.]

[REVIEW: Confirm what technical information the hosting provider, email provider, security tools and any analytics services collect. Examples may include IP addresses, browser information, request timestamps and error logs. Identify the actual data collected rather than retaining this example list unchanged.]

We use information provided in enquiries to understand your request, respond to you and, where appropriate, direct your enquiry to the relevant community representative or service.

[REVIEW: Confirm any additional uses, such as maintaining enquiry records, preventing spam, investigating technical problems or meeting legal obligations. Remove any purpose that does not apply.]

[REVIEW: Confirm whether contact details are used for newsletters, fundraising appeals or other ongoing communications. If so, explain the separate subscription arrangements, applicable lawful basis and how people can unsubscribe. Do not assume that making an enquiry amounts to agreeing to marketing.]

Data protection law requires us to identify an appropriate lawful basis for each purpose for which we use personal information.

[REVIEW: Suggested basis for ordinary enquiries, subject to assessment: our legitimate interests in responding to requests and administering community communications, balanced against the rights and interests of the individuals concerned.]

[REVIEW: Identify the actual lawful basis for each additional purpose. For example, processing needed to meet a specific legal obligation should identify the relevant obligation; processing based on consent should explain how consent can be withdrawn.]

Where we rely on consent, you can withdraw it by contacting us. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Some enquiries may include particularly sensitive information, such as information about religious beliefs or health. Please avoid sending unnecessary sensitive details through the general contact form.

[REVIEW: Assess whether the Board receives or infers special-category personal data through enquiries, donations or community-service requests. Where applicable, identify and document both a lawful basis and an appropriate additional condition for this processing before publishing the final notice.]

[REVIEW: Explain any approved procedure for handling sensitive enquiries, including who may access them and whether a more suitable contact method is available.]

[REVIEW: Confirm which authorised Board members, staff, volunteers or community representatives receive website enquiries and what access they have.]

[REVIEW: Confirm how enquiries are referred to separately operated synagogues, schools, service providers or other institutions. Explain when identifying information is shared, the purpose and the applicable arrangements. Do not assume that all community institutions are part of the same organisation.]

[REVIEW: List the actual service providers or meaningful categories of providers used to operate the website and handle enquiries. Examples may include the hosting provider and Resend for contact-form email delivery, if these are used in production.]

[REVIEW: Describe any other disclosures that apply, including disclosures required by law. Confirm the arrangements with providers that process information on the Board's behalf.]

[REVIEW: Confirm where website, email, backup and enquiry information is stored or accessed. A provider's company address does not necessarily identify all processing locations.]

[REVIEW: Where personal information is transferred outside Gibraltar, explain the relevant destinations or arrangements, applicable safeguards and how individuals can obtain further information about those safeguards.]

We aim to retain personal information only for as long as it is needed for the purpose for which it was collected, taking account of applicable legal obligations.

[REVIEW: Set an actual retention period or meaningful retention criteria for general enquiries. Example for discussion only: routine enquiries are deleted or anonymised within 12 months after the enquiry is closed, unless there is a documented reason to retain them longer.]

[REVIEW: Specify separate periods or criteria for technical logs, backups, complaints, donation records and any other records actually held. Confirm that deletion practices and provider settings support these statements.]

[REVIEW: Describe the safeguards actually in place, such as restricted access to enquiry inboxes, secure account authentication and appropriate arrangements with service providers. Do not claim safeguards that have not been implemented.]

Please do not submit payment-card details, passwords or unnecessary identity documents through the general contact form.

Depending on the circumstances and the lawful basis for processing, you may have rights to access your personal information, correct inaccurate information, request erasure, restrict processing, object to processing or receive certain information in a portable format.

These rights are subject to legal conditions and exceptions. Where processing is based on consent, you may withdraw that consent.

To make a request, contact info@jewish.gi. We may need information to verify your identity before responding.

You may also complain to the Gibraltar Regulatory Authority, which acts as Gibraltar's data protection supervisory authority. Information about contacting the Authority is available at https://www.gra.gi/data-protection.

If you choose to contact us, we need enough information to understand your request and an appropriate way to respond. If essential information is missing, we may be unable to deal with your enquiry.

[REVIEW: Identify which form fields are mandatory and confirm whether providing any information is a statutory or contractual requirement. Do not imply that optional fields must be completed.]

[REVIEW: Confirm whether any automated decision-making or profiling takes place. Check spam filtering, security tools and any other automated systems before describing their operation.]

[REVIEW: If applicable, explain significant automated decisions, how they work, their consequences and the relevant rights. If no relevant processing takes place, replace this section with an accurate short statement or remove it.]

The website includes links to external donation pages and other independently operated websites. The relevant provider or recipient may collect information when you use those services, as explained in its own privacy notice.

[REVIEW: Confirm whether the Board receives donor names, contact details, donation amounts, payment references or other information from each donation recipient or platform. Explain the purpose, lawful basis, recipients and retention arrangements for any donor information the Board receives.]

Please review the relevant destination's privacy information before submitting personal or payment details.

Please read our Cookie Policy for information about cookies and similar technologies used on this website.

We may update this notice to reflect changes to the website or the way information is handled. The date at the top of this page will identify the latest approved version.