Introduction
This is a statement of the practices of Tailte Éireann in connection with the processing of personal data and the steps taken by us as a data controller to safeguard individuals’ rights under data protection legislation, specifically the EU General Data Protection Regulation (GDPR) and Data Protection Acts 1988-2018.
Tailte Éireann fully respects your right to privacy and actively seek to preserve the privacy rights of data subjects who share personal data with us. Any personal information which you provide us will be treated with the highest standards of security and confidentiality, in accordance with data protection legislation.
This Privacy Statement explains the following:
- How Tailte Éireann collects your personal data.
- The purpose and legal basis for processing your personal data.
- How we securely store your personal data.
- Details of third parties with whom we share personal data.
- How long we retain your data.
- Cross-border / international data transfers (if any); and
- Your rights under data protection legislation.
How we collect your personal data
We collect personal data to provide our services to you. This data may be collected directly from you by our staff or from other systems under the control of Tailte Éireann.
Purpose and legal basis for processing personal data
The personal data we collect from you will only be processed by Tailte Éireann for the specific and lawful purposes as outlined in this Privacy Statement. Tailte Éireann will ensure that your data is processed fairly and lawfully in keeping with the principles of data protection as set out under Article 5 GDPR.
In order for the use of personal data to be lawful, it should be processed on a legal basis as set out under Articles 6 and 9 of GDPR.
Specific information on the legal basis for processing your personal data will also be provided at the point of collection of personal data. These may include:
- Where the processing of personal data is a statutory function of Tailte Éireann as a public authority. The statutory functions are set out in the Tailte Éireann Act 2022 and other underpinning legislation as set out in the Act.
- Where Tailte Éireann is required to process personal data by law or for complying with employment law.
- Where the processing of personal data is necessary for the formation of a contract with you.
- Where the processing of personal data is not related to the official functions of Tailte Éireann we may sometimes process personal data based on legitimate interests e.g., for the administration of events, purchases and the use of our services.
- Generally, when processing special categories of personal data Tailte Éireann will seek explicit consent for the processing of data except where another condition applies e.g., employment law.
Tailte Éireann has compiled processing records, in accordance with Article 30 GDPR requirements. If you require further detail, please contact dataprotection@tailte.ie.
How we securely store your personal data
Personal data will be stored confidentially and securely as required in the Tailte Éireann Data Protection Policy. Tailte Éireann is committed to ensuring that the processing of your data safeguarded by appropriate technical and organisational security measures relevant to the processing in accordance with Article 32 GDPR requirements.
When we store your personal data on our systems the data will be stored either on Tailte Éireann premises or on secure IT platforms within the European Economic Area (EEA) or external of the EEA which are subject to Chapter V GDPR requirements.
Details of third parties with whom we share personal data
Tailte Éireann will only share your data with third parties where necessary for the purposes of processing outlined in this Privacy Notice. In accordance with Article 28 GDPR, when we share your data with third parties Tailte Éireann will ensure that the data is processed according to specific instructions and that the same standards of confidentiality and security are maintained.
When we share your data with the third parties, Tailte Éireann will endeavour only to share the data that is needed, that the data is only processed according to our specific instructions and that the same standards of confidentiality and security are maintained. Once the processing of the data is complete any third parties with whom data was shared will be required to return the data to Tailte Éireann save where they are required to retain it by law.
How long we retain your data
Tailte Éireann will store your data for the duration of processing and as required in terms of Records Management policies.
Cross-border / International data transfers (if any)
While a majority of our data processors are based in the EU/EEA, it may happen that the data processor for certain purposes are based out of the EU/EEA. In all such instances, we will ensure to carry out all necessary due diligence checks and put in place appropriate contractual obligations as published by the European Commission. For all cross-border data transfers, a comprehensive “Data Transfer Impact Assessment” will be carried out prior to processing, to assess if the country where data is being imported will afford the same level of protection as within the EU. Appropriate safeguards as per Article 46 of the GDPR will be put in place for such transfers.
Your rights under data protection law
You have the following rights over the way we process your personal data.
Right of Access
You have the right to request a copy of the personal data which is processed by Tailte Éireann and to exercise that right easily and at reasonable intervals. Further information is available in the Tailte Éireann SAR Policy.
Under Article 15 GDPR individuals have the right to access their personal data that is under the control of Tailte Éireann. Responses to access requests will be issued within one month unless an extension is required.
To access your personal data:
- Complete the Data Subject Access Request Form or contact dataprotection@tailte.ie. Please give as much information as possible about the data you wish to access.
- Include photo ID and proof of address as described on the form with your application.
- Send the form to dataprotection@tailte.ie.
Consent
You may withdraw your consent to Tailte Éireann processing your personal data at any time when consent is the legal basis for the processing. To withdraw your consent, we require you to advise Tailte Éireann in writing.
Rectification
You have the right to have inaccuracies in personal data that we hold about you rectified.
Erasure
You have the right to have your personal data deleted where we no longer have any justification for retaining it.
Object
You have the right to object to processing your personal data if:
- We have processed your data based on a legitimate interest or for the exercise of the public tasks of Tailte Éireann and if you believe the processing to be disproportionate or unfair to you.
- The personal data was processed for the purposes of direct marketing or profiling related to direct marketing.
Restriction
You have the right to request to restrict the processing of your personal data if:
- You are contesting the accuracy of the personal data.
- The personal data was processed unlawfully.
- You need to prevent the erasure of the personal data in order to comply with legal obligations.
- You have objected to the processing of the personal data and wish to restrict the processing until a legal basis for continued processing has been verified.
Portability
Where it is technically feasibleyou have the right to have a readily accessible machine-readable copy of your data transferred or moved to another data controller where we are processing your data based on your consent and if that processing is carried out by automated means.
Right to be notified
Users have the right to be notified if their data was:
- Used in a manner they did not agree to.
- If their data was subjected to a GDPR breach.
- If their data is being used for purposes of profiling them (them specifically in an identifiable manner as opposed to anonymised and used for generic profile reporting).
Cookies
We use information gathered from cookies to help improve your experience of our website. Some cookies are essential so you can move around the website and use its features. Our website also contains third party cookies. You can refuse or consent to third party cookies when you first visit our website or by following the guidelines in the Tailte Éireann Cookies Policy.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this, you may not be able to use the full functionality of this website.
Further information
If you have any queries relating to the processing of your personal data for the purposes outlined above, you can contact the Tailte Éireann Data Protection Unit.
If you are not satisfied with the information, we have provided to you in relation to the processing of your personal data or you are dissatisfied with how Tailte Éireann is processing your data you can make a complaint to the Data Protection Commissioner.