Citizen Innovation Lab respects the privacy of all visitors to its website.
We will handle your personal data in a careful, secure and confidential manner. This privacy statement explains how we do this. This privacy statement applies to:
- Our website
2: What personal data do we collect?
We collect personal data via our website and when you contact us. Personal data is data that can be used to determine your identity. We collect personal data in the following situations:
- When you send us an e-mail, we will process your name and contact information in order to be able to contact you to answer your question and/or process your comment.
- When you visit our website, we will collect data regarding your visit and your behaviour on our website.
3: Why do we collect personal data?
We process your personal data for the following purposes:
- When you send us an e-mail message or contact us by completing the web form: in order to respond to your question or comment;
- When you visit our website: in order to analyse and improve our service provision – this includes the measurement and analysis of statistical data and the production of user statistics.
We will not use your personal data for any other purposes, unless the further processing of the personal data is compatible with the purposes for which this data was originally processed.
4: Legal grounds for the processing
4.1: Legitimate interests
If we have any legitimate interests in the processing of your personal data, we can process your data for these reasons. We will not process your personal data when your interest in not having the data processed carries more weight.
Answering questions per e-mail is part of our regular activities. The data you supply to this end is therefore necessary to provide the best possible answer to your question. It is also part of our regular business activities to keep you informed of any news items. We will do so via our newsletter. We might take pictures and audio and video recordings during events that you visit, that we can use in our news items. Furthermore, we have an interest in a well-functioning website, tailored to the requirements of website visitors.
You are entitled to object to the processing of your personal data as specified above. Please contact us if you wish to object. If you do so, we will cease the data processing, unless there are compelling and legitimate grounds as a result of which our interest in the processing of your data overrides your interest in having us cease the processing operations. When you request us to cease the data processing, you may no longer be able to have full access to our services.
In some cases, we will ask you for permission before we process your data. You are entitled to withdraw your permission at all times. In that case we will stop processing your personal data.
What is a cookie?
Use of permanent cookies
We use a permanent cookie to recognise you during a subsequent visit to our website. Consequently, the website can be adjusted specifically to your preferences. We can even use a cookie to remember you have given permission for the placement of cookies. This saves you from repeating your preferences. This therefore saves time and enhances your experience on our website. You can remove permanent cookies via the settings on your browser.
Use of session cookies
We can use a session cookie to monitor which website sections you have viewed during a particular session. This enables us to gear our service towards the surfing behaviour of our visitors in the best possible way. These cookies will be removed automatically once you close your web browser.
Information collected with Google Analytics has been anonymised as far as possible. For example, we do not have access to information on individual website visitors. Google will not process your full IP address, and will partially mask the data from your IP address.
The data will be transferred to and saved by Google on servers in the United States. Google declares to be in compliance with the Privacy Shield principles and is affiliated to the Privacy Shield program of the US Department of Commerce. This means that a proper protection level is in place for the processing of any personal data.
We have not given Google permission to the use the collected data for its own purposes. The cookies collected by Google Analytics will not be used in combination with other services from Google, including DoubleClick and AdWords.
Enabling, disabling and removing cookies
You can find more information on enabling, disabling and removing cookies in the instructions and/or by using the Help function of your browser.
6: Security of personal data
We will ensure the personal data we have received from you is secured, in line with applicable legal requirements and guidelines.
7: Retention period of personal data
We will not store your personal data longer than is necessary for the purpose of data processing.
- Answering your questions: your name and contact details will not be stored longer than is necessary and in any case not longer than a year.
- Technical reasons, including website optimisation: technical data are stored in anonymous form as far as possible and will be used for as long as is necessary for the optimisation of the website.
8: Where is your personal data processed?
We will process your personal data in the European Union/EEA. Your personal data could be processed in or passed on to countries outside the European Union/EEA, but only if there are appropriate safeguards in place to secure your personal data.
9: Who has access to your data?
We will not supply your personal data to third parties, except to the parties specified below or if you have given permission for this.
We work with the following external parties who have access to your personal data:
- Google Analytics, for website optimisation
We have concluded processing agreements with parties who process your personal data. This serves to protect your personal data.
We reserve the right to share your personal data with third parties if there is a legal obligation to do so, or when this is required to represent your interests or those of us or third parties.
10: Changes to our policy
This privacy statement could be amended. We will always announce any changes on this website. We will personally inform you of any changes that apply to you, for example by sending you an e-mail.
11: How can you exercise your rights?
You have a number of rights under privacy legislation (this includes the General Data Protection Regulation (GDPR). These rights are specified in article 12 – 23 of the GDPR and in related legislation. In any case, you have the following rights with regard to your personal data:
- The right to request access to your personal data
- The right to request the correction of your personal data if it is not correct (rectification)
- The right to request removal of your personal data
- The right to request the restriction of your personal data
- If we process your personal data based on our legitimate interests: the right to object to the (further) processing of your personal data (resistance)
- If we process your personal data based on your permission and the data is processed in a fully automatic manner: the right to request the transfer of your personal data (data portability)
If you wish to exercise one or more of the rights specified above, you can contact us via Mr Gall, firstname.lastname@example.org.
12: Objection and the right to complain
We have processed certain personal data about you based on our legitimate interests. On the basis of the latter, you have the right to object to the processing of your personal data at all times. In this case, we will cease the data processing, unless there are compelling and legitimate grounds as a result of which our interest in the processing of your data overrides your interest in having us cease the processing operations.
Do you disagree with a decision made by us, for example the decision not to remove your personal data? Then you will be able to use one or more of the following options:
- You can contact us: in this case, we will try to find a solution together with you.
- You can submit a complaint: you have the right to submit a complaint to the Data Protection Authority.
- You can request for mediation: you can ask the Data Protection Authority to mediate.
- You can litigate: you have the right bring an action before a competent court in order to settle the dispute.
The responsibility for the processing of personal data lies with:
Citizen Innovation Lab UL City Campus Sarsfield Street, Limerick V94 DW21