Privacy Policy

INTRODUCTION

 IDENTITY OF THE CONTROLLER OF PERSONAL INFORMATION

CONTACT DETAILS OF THE DATA PROTECTION OFFICE

WHEN DOES THIS PRIVACY STATEMENT APPLY

ACCEPTANCE OF THIS PRIVACY STATEMENT

INFORMATION WE MAY COLLECT FROM YOU

WHERE WE STORE YOUR DATA

USE MADE OF YOUR DATA

DISCLOSURE OF YOUR DATA

SERVICE PROVIDERS

We use third-party service providers who work for us in the provision of our services. In providing the services, your data will, where applicable, be processed by the service provider on our behalf.

We will check any third party that we use to ensure that they can provide sufficient guarantees regarding the confidentiality and security of your data. We will have written contracts with them which provide assurances regarding the protections that they will give to your data and their compliance with our data security standards and international transfer restrictions.

DISCLOSURE TO THIRD PARTIES

In certain circumstances, we may share and/or are obliged to share your data with third parties for the purposes described above and in accordance with Data Protection Legislation.

These third parties include:

RETENTION

LINKS TO OTHER SITES

SECURITY

YOUR RIGHTS

You may have various rights under Data Protection Legislation. However, in certain circumstances, these rights may be restricted. In particular, your rights may be restricted where this is necessary: (i) for the prevention, detection, investigation and prosecution of criminal offences, and/or (ii) in contemplation of or for the establishment, exercise or defence of a legal claim or legal proceedings (whether before a court, tribunal, statutory body or an administrative or out-of-court procedure).

Article 23 of the General Data Protection Regulation, [which is transposed into Irish law by section 54 of the Data Protection Bill 2018], sets out the circumstances in which your rights may be restricted.

Your right

What does it mean?

How do I execute this right?

Conditions to exercise?

 

Right of access

Subject to certain conditions, you are entitled to have access to your personal data which we hold (this is more commonly known as submitting a "data subject access request").

Requests for such information should be made in writing to to Data Protection Officer by email data.protection@inmplc.com and/or by post to INM Data Controller, INM, 27-32 Talbot St, Dublin 1, Ireland. If possible, you should specify the type of information you would like to see to ensure that our disclosure is meeting your expectations.

We must be able to verify your identity. Your request may not affect the rights and freedoms of others, e.g. privacy and confidentiality rights of other individuals and/or businesses.

 

Right of data portability

Subject to certain conditions, you are entitled to receive the data which you have provided to us and which is processed by us by automated means, in a commonly-used machine readable format.

Requests for such information should be made in writing to to Data Protection Officer by email data.protection@inmplc.com and/or by post to INM Data Controller, INM, 27-32 Talbot St, Dublin 1, Ireland. If possible, you should specify the type of information you would like to see to ensure that our disclosure is meeting your expectations.

The GDPR does not establish a general right to data portability. This right only applies if the processing is based on your consent or on our contract with you and when the processing is carried out by automated means (e.g. not for paper records). It affects only personal data that was "provided" by you. Therefore, it does not, as a rule, apply to personal data that was created by the INM or supplied to the INM by any other individual and/or business.

Rights in relation to inaccurate personal or incomplete data

You may challenge the accuracy or completeness of personal data which we process about you. If it is found that personal data is inaccurate, you are entitled to have the inaccurate data removed, corrected or completed, as appropriate.

We encourage you to notify us of any changes regarding your personal data as soon as they occur, including changes to your contact details.

Please always check first whether self-help tools are available.

Requests for such information should be made in writing to Data Protection Officer by email data.protection@inmplc.com and/or by post to INM Data Controller, INM, 27-32 Talbot St, Dublin 1, Ireland.

This right only applies to your own personal data. When exercising this right, please be as specific as possible.

Right to object to or restrict our data processing

Subject to certain conditions, you have the right to object to or ask us to restrict the processing of your personal data.

Requests for such information should be made in writing to Data Protection Officer by email data.protection@inmplc.com and/or by post to INM Data Controller, INM, 27-32 Talbot St, Dublin 1, Ireland.

This right applies only if the processing of your personal data is necessary for the performance of a task carried out in the public interest (see "basis of processing" above). Objections must be based on grounds relating to your particular situation. They must not be generic so that we can demonstrate that there are still lawful grounds for us to process your personal data.

Right to have personal data erased

Subject to certain conditions, you are entitled, on certain grounds, to have your personal data erased (also known as the "right to be forgotten"), e.g. where you think that the information we are processing is inaccurate, or the processing is unlawful.

Requests for such information should be made in writing to Data Protection Officer by email data.protection@inmplc.com and/or by post to INM Data Controller, INM, 27-32 Talbot St, Dublin 1, Ireland.

There are various lawful reasons why we may not be in a position to erase your personal data. This may apply (i) where we have to comply with a legal obligation, (ii) in case of bringing legal proceedings or defending legal proceedings, or (iii) where retention periods apply by law or under the INM’s internal data retention policies.

Right to withdrawal

You have the right to withdraw your consent to any processing for which you have previously given that consent.

Requests for such information should be made in writing to Data Protection Officer by email data.protection@inmplc.com and/or by post to INM Data Controller, INM, 27-32 Talbot St, Dublin 1, Ireland.

If you withdraw your consent, this will only take effect for the future.

 

COMPLAINTS

YOUR RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

CHANGES TO OUR PRIVACY STATEMENT

CONTACT US