PRIVACY POLICY

Introduction

The purpose of this policy is to provide any person (or ‘data subject’) in relation to whom DARMAH MARKET RESEARCH  holds personal data, with details of the information that we collect, how we process it and who we share it with. It also explains your rights under data protection law in relation to our processing of your data.

Certain key terms are used in this policy such as ‘personal data’, ‘processing’, ‘data protection law’ and these are defined in the Key Definitions section included at Annex 1.

This policy applies to DARMAH MARKET RESEARCH ’s employees.

 

Who controls the use of your personal data?

DARMAH MARKET RESEARCH is the company that controls and is responsible for personal data that is covered by this policy. DARMAH MARKET RESEARCH is therefore a ‘data controller’.

Compliance with principles of data protection law

DARMAH MARKET RESEARCH  adheres to the principles of the data protection law and as a result, your personal data will be:

  • Processed lawfully, fairly and in a transparent manner;

  • Collected for specified, explicit and legitimate purposes;

  • Adequate, relevant and limited to what is necessary;

  • Accurate and up-to-date;

  • Kept for no longer than is necessary for the specified purpose or purposes; and

  • Processed in a manner that maintains the integrity and confidentiality of your data.

What personal data is collected?

The type of information that DARMAH MARKET RESEARCH  holds (in both paper or electronic format), where appropriate and permitted by law, includes personal details relating to you, such as your name, professional contact.

Where do we collect your personal data?

Most of your personal data that we collect will be provided by you through your interactions with us. Certain personal information (name, job title, business email address, business address and/or mobile phone number) may be provided to DARMAH MARKET RESEARCH  by third parties, such as your employer, on your behalf for the purpose of contacting you about legitimate DARMAH MARKET RESEARCH  business. DARMAH MARKET RESEARCH  may also source personal data from publicly-available sources such as your employers’ website, your own website, and commercially published directories.

Legal basis for processing your information

We process your personal data in order to provide you with our services and to assist us in the operation of our business. Under data protection law we are required to ensure that there is an appropriate basis for the processing of your personal data, and we are required to let you know what that basis is.

There are various options under data protection law, but the primary bases on which we process your personal data are:

  • Performance of a contract or agreement with you - we collect and use your information primarily for the purpose of managing our working relationship with you, for example, in order to provide services, to arrange payment for the provision of your services or to collect payment for our services, to communicate with you, and otherwise to fulfil any contractual obligations owed to you.

  • Where you have consented - for certain types of information, DARMAH MARKET RESEARCH  may rely on your consent to the use of such information. Our policy is to keep to the minimum necessary any data where the basis for processing is your consent.  In that event, you will have been asked for your explicit and specific consent; and you will be entitled to withdraw your consent at any time by contacting us using the contact details at the bottom of this policy. Please note that if you withdraw your consent we may not be able to continue providing you with the service to which the consent related.

DARMAH MARKET RESEARCH  will only use your information for the purposes for which it was collected, unless we reasonably consider that we need it for another purpose that is compatible with the original purpose.  If we need to use your information for an unrelated but compatible purpose, we will notify you in advance of our use of your information and explain the legal basis for this.  Note that we may process your information without your knowledge or consent where this is required or permitted by applicable law.

Who do we share your personal data with?

DARMAH MARKET RESEARCH  may disclose your personal information in response to a valid, legally compliant request by a competent authority or in response to a court order or otherwise in compliance with any applicable law, regulation, legal process or enforceable governmental request or other statutory requirement; to detect, prevent or otherwise address fraud, security or technical issues; or to protect against imminent harm to the rights, property or safety of DARMAH MARKET RESEARCH .

 

Transfers outside of the European Economic Area (EEA)

DARMAH MARKET RESEARCH  does not transfer personal data outside the European Economic Area.

Automated processes

DARMAH MARKET RESEARCH  does not carry out automated decision-making processes with personal data.

Retention of personal data

DARMAH MARKET RESEARCH  will retain your personal data for no longer than is necessary for the purpose for which we collected it. We access how long we need to keep personal data for in order to meet our reasonable business purposes.

DARMAH MARKET RESEARCH  will permanently delete your personal data when the relevant retention period has expired.

Data breaches

All breaches of personal data held by DARMAH MARKET RESEARCH  will be reported to the Data Protection Authority within 72 hours, unless the data was anonymised or encrypted.

We understand the consequences of breeches of Data Protection. It is of utmost importance that Darmah comply with all aspects of this policy.

Safeguards

DARMAH MARKET RESEARCH  takes the security of your data very seriously and has implemented reasonable security measures, including secure password protected networks and physical security measures to protect your data from loss, misuse and unauthorised access or disclosure. DARMAH MARKET RESEARCH  also maintains reasonable procedures to help ensure that such data is reliable for its intended use and is accurate, complete and current.

Future employees of DARMAH MARKET RESEARCH  who handle personal data covered by this policy will be made aware of this policy and will be given training in how to correctly collect, process, store and delete data.

Your rights

You have various rights under data protection law, subject to certain exemptions, in connection with our processing of your personal data including the right to:

  • Right to access the data – You have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data.

  • Right to rectification – You have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete.

  • Right to erasure – You have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the ‘right to be forgotten’.

  • Right to restriction of processing or to object to processing – You have the right to request that we no longer process your personal data for particular purposes, or to object to our processing of your personal data for particular purposes.

  • Right to data portability – You have the right to request us to provide you, or a third party, with a copy of your personal data in a structured, commonly used machine readable format.

  • Right to complain - You have the right to lodge a complaint with the Data Protection Authority if you are unhappy with our processing of your personal data.

  • Right to withdraw your consent – When we process your personal data on the basis of your consent, you are free to withdraw that consent at any time by contacting us using the contact details below. Please note that if you withdraw your consent we may not be able to continue providing you with the service to which the consent related.

In order to exercise any of these rights, please contact us using the contact details set out below.

Changes to this policy

The provisions of this policy may be altered by DARMAH MARKET RESEARCH  from time to time. 

 

Queries and complaints

DARMAH MARKET RESEARCH  has not appointed a data protection officer, however, if you have any queries or complaints in connection with our processing of your personal data, you can get in touch with us using the following contact details:

       E-Mail:  info@darmahmarketresearch.ie       

Complaints may also be submitted to the Office of the Data Protection Commissioner (see wwww.dataprotection.ie), or you can contact them by phone - LoCall 1890 252 231 or +353 (0761) 104 800.

 

 

Annex 1 – Key Definitions:

“Data Protection Authority” means the Irish Data Protection Commissioner which is DARMAH MARKET RESEARCH’s supervisory authority in the European Union.

 “data protection law” means the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and any national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in Ireland and any successor legislation to the GDPR or the Data Protection Acts 1988-2003.

“consent” of the data subject means any freely given, specific, informed an unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her – such as a written/electronic statement or an oral statement.

“data controller” means the legal person or company who determines the purposes and means of the processing of personal data, e.g. DARMAH MARKET RESEARCH.

“data processor” means a person or company who processes personal data on behalf of the data controller.

“data subject” means an identifiable natural person who is the subject of the personal data, e.g. an employee;

“personal data” means any information relating to an identified or identifiable natural person (data subject).

 “processing” means any operation which is performed on personal data, where automated or not, such as collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, alignment or combination, restriction, erasure or destruction.

“special categories of data” means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data and data concerning health or a person’s sex life or sexual orientation.