https___2016-2018.citizensassembly.ie_ga_Chosaint-Sonrai-__1.xml
1.1 2.1 3.1 4.1 5.1 5.2 5.3 6.1 6.2 7.1 8.1 9.1 10.1 11.1 12.1 12.2 12.3 12.4 12.5 13.1 14.1 14.2 15.1 16.1 16.2 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 24.2 24.3 24.4 25.1 26.1 26.2 27.1 28.1 28.2 28.3 28.4 29.1 30.1 31.1 32.1 32.2 32.3 32.4 32.5 32.6 33.1 34.1 35.1 36.1 36.2 36.3 37.1 37.2 38.1 39.1 40.1 41.1 42.1 42.2 42.3 42.4 42.5 43.1 43.2 43.3 44.1 45.1 45.2 46.1 46.2 47.1 48.1 49.1 49.2 49.3 49.4 49.5 50.1 51.1 52.1 52.2 52.3 53.1 54.1 55.1 56.1
Data Protection Policy for Cork Vegfest Data Protection Policy for Cork Vegfest January 2020 Introduction At Cork Vegfest privacy and data protection rights are very important to us. We will not collect any personal information about you without your clear permission. Any personal information which you volunteer to Cork Vegfest will be treated with the highest standards of security and confidentiality, and strictly in accordance with the Data Protection Acts, 1988 & 2003 and with General Data Protection Regulations which came into effect on 25 May 2018. Data Protection is the safeguarding of the privacy rights of individuals in relation to the processing of personal data, in both paper and electronic form. The Data Protection Acts 1988 and 2003 (the “Data Protection Acts”) lay down strict rules about the way in which personal data and sensitive personal data are collected, accessed, used and disclosed. This document outlines Cork Vegfest’s policy to help ensure that we comply with the Data Protection Acts. Inquiries about this Data Protection Policy should be made to: General Manager/Data Protection Officer, Cork Vegfest – gdpr@corkvegfest.com Purpose of this policy This policy is a statement of Cork Vegfest’s commitment to protect the rights and privacy of individuals in accordance with the Data Protection Acts (1988) and (2003) and the General Data Protection Regulations. Collecting information We collect your information as a means of contacting you, a valued Cork Vegfest stakeholder, in the lead up to and during Cork Vegfest and ancillary events hosted by Cork Vegfest throughout the year. Stakeholders include volunteers, suppliers, exhibitors, speakers and performers; any and all applicants seeking to engage with the festival or associated events. We retain the right to contact all stakeholders in relation to future events or related opportunities with Cork Vegfest and associated events. All information provided to us is treated in the strictest confidence and is not made available to any third parties. We have outlined below the variety of ways in which data is collected and stored on our stakeholders, why we collect it, who has access to it and our retention policy for each area. Data Protection Principles Cork Vegfest is firmly committed to ensuring personal privacy and compliance with the Data Protection Acts, including the provision of best practice guidelines and procedures in relation to all aspects of Data Protection. We shall perform our responsibilities under the Data Protection Acts in accordance with the following Data Protection principles: - Obtain and process information fairly – We shall obtain and process personal data fairly and in accordance with statutory and other legal obligations. - Keep it only for one or more specified, explicit and lawful purposes – We shall keep personal data for purposes that are specific, lawful and clearly stated. Personal data will only be processed in a manner compatible with these purposes as defined above. - Use and disclose only in ways compatible with these purposes – We shall use and disclose personal data only in circumstances that are necessary for the purposes for which we collected the data. - Keep it safe and secure – We shall take appropriate security measures against unauthorized access to, or alteration, disclosure or destruction of personal data and against its accidental loss or destruction. - Keep it accurate, complete and up-to-date – We adopt procedures that ensure high levels of data accuracy, completeness and that data is up-to-date. - Ensure it is adequate, relevant and not excessive – We shall only hold personal data to the extent that it is adequate, relevant and not excessive. - Retain for no longer than is necessary – We have a retention policy for personal data. - Access Requests – We will respond to requests for records within one month of receiving the request. Cork Vegfest’s Filing Systems Cork Vegfest uses Google Drive as its electronic filing system. Google Drive facilitates access to documents and files only in situations where they have been specifically shared with an individual. It is our operational policy that files are only shared with the team members who need to access the information to carry out their duties. Data is deleted as per our retention policies which are outlined in each area below. Google Drive is a secure platform for file storage and is GDPR compliant – https://cloud.google.com/security/gdpr Cork Vegfest retains minimal information in hard copy format which is stored in the General Manager’s office. We retain accounting documents (invoices and related paperwork) as per Revenue Guidelines. Mailchimp / Customer Mailing Lists We store data (customer name and email addresses) on our Mailchimp for customers who have explicitly given their consent to us to contact them with marketing information and festival updates on Cork Vegfest and related events. Subscribers either consent to marketing communications when they purchase their ticket (via an opt in tick box) or they opt in directly via our website newsletter sign up form. We retain this information until a customer decides to opt out of receiving the communications. The Marketing Team have access to this information. We do not share this information with third parties. Mailchimp services used by Cork Vegfest are GDPR compliant – View Mailchimp’s Privacy Policy Eventbrite Eventbrite is Cork Vegfest’s Ticketing service and used to sell tickets to Cork Vegfest and related events. Information stored on Eventbrite includes customer names, addresses, emails and billing information. Cork Vegfest collects this information so that we can verify customer orders and issue them tickets to the festival and provide them with relevant information that they require in advance of coming to the festival. Customers provide the information as part of the purchasing process. We retain this information on file via Eventbrite. The Event Coordinator and Ticketing Administrator have access to this information. We do not share this information with third parties. Eventbrite’s services used by Cork Vegfest are GDPR compliant – View Eventbrite’s Privacy Policy Google Drive We use Google Drive to create application forms for volunteers, speakers and performers and exhibitors for the festival. The information is needed to process the selection of talks and worker roles for the festival and to communicate with them about their duties should they be selected. This information is entered directly by applicants. The information is accessible by the Event Organizer, Exhibitors Manager and Steward Coordinator and the relevant team members who are involved in the selection process. The applicants themselves can access the forms which they have completed. Should we have an external third party involved in the review process, the information of shortlisted applicants is shared with them too. Applications are retained for 26 months after obtaining the information and then deleted. Google Drive services used by Cork Vegfest are GDPR compliant – https://cloud.google.com/security/gdpr Google Analytics Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. We use the information to track performance of our website and to calculate the amount of resources we need to deliver the site to our users. This data is generated by the requests made when visitors to our site click on different pages. Our retention policy for this data is set to a default of 14 months. This allows us to compare easily performance from year to previous year. The information is accessible by the Event Coordinator, and to the Web and Marketing team. This data is available to the technical support to the Web and Marketing team. This is a requirement to ensure the site remains functional under the heavy load experienced during the festival peak periods. Guest Details for Tickets We collate information on guests (name and contact email address) so that we can issue guests with tickets for Cork Vegfest. Information is obtained directly from the stakeholders by the relevant Cork Vegfest team member who have requested the information so as to action the production of guest tickets. Data collected in spreadsheet format is retained for 6 months after obtaining the information. Guest data is is transferred to Eventbrite and remains on Eventbrite after the event. This information is not shared with third parties. Steward Details We request specific information from our stewards when they agree to volunteer for Cork Vegfe. This information includes name, address, contact phone number, next of kin details. This information is required for contract purposes. Information is obtained directly from the steward by Google Drive form. This information is passed on to the Steward Coordinator. This information is retained on file as part of our HR filing procedures. Responsibility Overall responsibility for ensuring compliance with Data Protection Acts rests with Cork Vegfest. All employees and contractors of Cork Vegfest who separately collect, control or process the content and use of personal data are individually responsible for compliance with the Data Protection Acts. Cork Vegfest’s Data Protection Officer coordinates the provision of support, assistance, advice and training within Cork Vegfest to ensure that the company is in a position to comply with the legislation. We will inform the DPC of any breaches on Cork Vegfest’s behalf within 72 hours. Review This Data Protection Policy will be reviewed regularly in light of any legislative or other relevant developments. This Data Protection policy is available on the Cork Vegfest website.
1.1 2.1 2.2 2.3 2.4 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 14.2 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 22.2 22.3 22.4 23.1 24.1 25.1 26.1 26.2 26.3 27.1 27.2 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 40.2 40.3 41.1 42.1 42.2 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 51.2 51.3 51.4 52.1 52.2 52.3 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1
Thug an tAcht um Chosaint Sonraí, 1988 agus an tAcht um Chosaint Sonraí (Leasú), 2003, cosaint ar chearta príobháideachais an duine aonair maidir le sonraí pearsanta, mar shampla, sonraí a bhaineann leo atá á gcoinneáil ar chomhaid ríomhaire nó ar chomhaid láimhe is féidir a struchtúrú nó a chuardach trí thagairt a dhéanamh do dhaoine aonair. Tháinig an Rialachán Ginearálta maidir le Cosaint Sonraí (GDPR) i bhfeidhm an 25 Bealtaine 2018. Leagtar síos creat nua sa Rialachán le sonraí an duine aonair a chosaint agus tá a fhorálacha infheidhme go díreach i ngach stát de chuid an AE ón Aoine, 25 Bealtaine. Cuireann an GDPR béim ar thrédhearcacht, ar shlándáil agus ar chuntasacht rialaitheoirí sonraí agus neartaíonn sé cearta an tsaoránaigh i leith príobháideachas sonraí ag an am céanna. Tagann an GDPR in áit na Treorach um Chosaint Sonra 1995. Tugtar breac-chuntas sa Bheartas Cosanta Sonraí leasaithe seo de chuid an Tionóil Saoránach maidir le mar a dhéanfaimid an GDPR a chomhlíonadh ó thaobh bainistiú agus próiseáil a dhéanamh ar fhaisnéis a bhaineann le daoine aonair. Prionsabail um Chosaint Sonraí Ó bunaíodh é i mí Iúil 2016, tá an Tionól Saoránach ag feidhmiú a chuid freagrachta faoi na hAchtanna um Chosaint Sonraí 1998 agus 2003 de réir na n-ocht (8) bprionsabal um Chosaint Sonraí seo a leanas:- - Faisnéis a fháil agus a phróiseáil go cothrom; - An fhaisnéis a choinneáil do chríocha sainiúla, follasacha agus dlíthiúla amháin; - Sonraí a úsáid agus a nochtadh ar bhealaí atá comhoiriúnach leis na críocha sin amháin; - Sonraí a choinneáil sábháilte agus slán; - Sonraí a choinneáil cruinn, comhlán agus cothrom le dáta; - A chinntiú go bhfuil sonraí leordhóthanach, ábhartha agus nach bhfuil siad iomarcach; - Gan sonraí a choinneáil níos faide ná mar is gá do chríoch(a) a bhfuarthas iad; - Cóip dá chuid/dá cuid sonraí pearsanta a thabhairt don duine aonair ar iarratas. Cuirfidh an tAcht um Chosaint Sonraí 2018 nua leis an reachtaíocht a bhí ann roimhe seo. Leagtar amach sa GDPR na prionsabail seo a leanas maidir le sonraí pearsanta a chosaint:- - Ní mór Sonraí Pearsanta a bhailiú ar bhealach atá dleathach, cothrom agus trédhearcach; - Níor chóir iad a fháil ach amháin do chríocha sainiúla agus dleathacha; - Níor chóir iad a úsáid ach amháin ar bhealaí atá comhoiriúnach leis na críocha sin; - Ní mór sonraí a bheith cruinn, ábhartha, iomlán agus cothrom le dáta; - Níor chóir iad a choimeád níos faide ná mar is gá; - Ní mór iad a phróiseáil ar bhealach a chinntíonn slándáil chuí sonraí pearsanta. Freagracht Is ionann an Tionól Saoránach agus feidhm sa daonlathas breithniúcháin, a chuireann an saoránach i gcroílár saincheisteanna dlíthiúla agus beartais atá tábhachtach agus atá i ndán do shochaí na hÉireann sa lá atá inniu ann. Le buntáiste ó chomhairle saineolaíoch, atá neamhchlaonta agus fíorasach, tá líon ábhair a cuireadh os a gcomhair breithnithe ag an 100 saoránach. Chuir a gconclúidí bonn ar fáil do líon tuarascála agus moltaí a cuireadh faoi bhráid Thithe an Oireachtais le go ndéanfaidh ionadaithe tofa tuilleadh díospóireachta orthu. Amhail an 25 Bealtaine 2018, chuir an Tionól trí thuarascáil faoi bhráid agus cuirfear tuarascáil deiridh eile faoi bhráid an mhí seo chugainn. Tá an fhoireann go léir agus iad siúd atá ar chonradh chun oibriú leis nó seirbhís a chur ar fáil don Tionól tiomanta go daingean príobháideachas pearsanta agus comhlíonadh na Reachtaíochta Cosanta sonraí a chinntiú. Oibríonn an Tionól faoi shé phríomhphrionsabal – Oscailteacht, Cothroime, Comhionnanas, Éifeachtúlacht, Meas agus Comhghleacaíocht. Comhaltaí – Sonraí Pearsanta Táimid tiomanta do phríobháideachas ár gComhaltaí a chosaint trínár Rialacha agus Nósanna imeachta comhaontaithe. Ní bhailítear mionsonraí Comhaltaí ach do chríocha faisnéise amháin agus ní fhoilsítear ach ainmneacha agus ceantair ghinearálta a dtagann na Comhaltaí astu. Caitear faoi dhianrún leis na mionsonraí eile go léir. Bailíodh mionsonraí pearsanta daoine aonair nuair a earcaíodh iad agus bailíodh mionsonraí breise má tugadh cuireadh do dhuine aonair a bheith mar Lánchomhalta den Tionól. Ní bhaintear úsáid as na mionsonraí seo ach amháin do chríocha teagmháil a dhéanamh le comhaltaí maidir le gnó an Tionóil agus ní fhoilsítear go poiblí riamh iad. Aighneachtaí – Sonraí Pearsanta Tá breac-chuntas soiléir tugtha freisin inár mbeartas ar fhoilsiú sonraí pearsanta maidir leis an bpróiseas Aighneachtaí ar an láithreán gréasáin ag www.citizensassembly.ie. - Foilseofar gach aighneacht a sheolfar isteach ar an láithreán gréasáin agus taispeánfar ainm iomlán (céadainm, sloinne)/ainm na heagraíochta, más cuí. - Ní ghlacfar le haighneachtaí anaithnid. - I gcás scéalta pearsanta agus aighneachtaí atá goilliúnach, bainfear amach na sonraí pearsanta go léir agus na mionsonraí in-sainaitheanta gaolmhara nó cuirfear in eagar iad má éilítear sin. Ní fhoilsíonn an Tionól aon sonraí pearsanta in-sainaitheanta a fhaightear le haighneachtaí. Saineolaithe/Cainteoirí/Rannpháirtithe – Sonraí Pearsanta Ní fhoilseofar faisnéis phearsanta a chuireann saineolaithe, cainteoirí agus rannpháirtithe eile ar fáil do bhreithniúcháin an Tionóil ach amháin má tá siad ar an eolas agus/nó lena gcead. Arís, ní bhainfear úsáid as a gcuid sonraí pearsanta ach amháin le teagmháil a dhéanamh leo maidir le gnó an Tionóil de réir mar is cuí. Láimhseáil Sonraí Cinnteoidh an fhoireann, agus iad ag láimhseáil sonraí pearsanta, agus le sárú sonraí pearsanta a sheachaint, nach mbainfear úsáid as sonraí pearsanta den sórt sin ach amháin chun na críche ar seoladh isteach iad, coinneofar faoi rún iad mar is cuí agus daingneofar na sonraí pearsanta go sábháilte nuair nach bhfuil siad á n-úsáid. Slándáil Sonraí Tá meas againn ar chearta úsáideoirí an láithreáin gréasáin agus mar riail ghinearálta, ní bhaileoimid faisnéis pearsanta mura dtugtar an fhaisnéis sin go deonach. Caithfear le faisnéis phearsanta den sórt sin de réir na gcaighdeán is airde slándála agus rúndachta, agus go dlúth de réir na Reachtaíochta Cosanta Sonraí. Ní bhainfear úsáid as aon fhaisnéis a chuireann úsáideoirí ar fáil dúinn ach amháin ar aon dul leis an gcríoch a gcuirtear an fhaisnéis sin ar fáil. Sá chás go gcuireann úsáideoir faisnéis phearsanta ar fáil ar bhonn deonach mar fhreagra ar cheistiúchán nó ar shuirbhé, is chun críocha taighde agus anailíse amháin a bhainfear úsáid as na sonraí sin. Ní nochtar aon fhaisnéis phearsanta linn ó thaobh brabhsáil gréasáin, cé go mbíonn faisnéis staidrimh áirithe ar fáil dúinn trínár soláthróir seirbhíse idirlín. D’fhéadfadh sé go n-áireodh an fhaisnéis sin: - Seoladh loighciúil an fhreastalaí atá á úsáid - Ainm fearainn ardleibhéil óna bhfuil an tIdirlíon á rochtain (mar shampla, m.sh. com, .org srl.) - An cineál brabhsálaí atá á úsáid - An dáta agus an t-am a bhfaigheann duine éigin rochtain chuig an láithreán - An seoladh idirlín atá in úsáid le nascadh lenár láithreán Baintear úsáid as roinnt den fhaisnéis thuas le hachoimre staidrimh a chruthú a thugann deis dúinn rochtain a fháil ar an líon cuairteoirí chuig an láithreán gréasáin, na leathanaigh is minice atá á rochtain a aithint agus go ginearálta cuidiú linn an láithreán gréasáin a dhéanamh níos éasca le húsáid. Google Analytics Na meáin shóisialta – d’fhéadfadh roinnt láithreán gréasáin tríú páirtí ar nós Twitter úsáid a bhaint as fianáin. Baineann láithreán Gréasáin an Tionóil Saoránach úsáid as Google Analytics, seirbhís anailísíochta gréasáin a chuireann Google, Inc. (“Google”) ar fáil. Baineann Google Analytics úsáid as “fianáin”, arbh ionann iad agus téacschomhaid atá curtha ar do ríomhaire chun cuidiú leis an láithreán gréasáin anailís a dhéanamh ar an mbealach a mbaineann úsáideoirí úsáid as an láithreán. Déanfar an fhaisnéis a chruthaíonn fianán maidir leis an úsáid a bhaineann tú as an láithreán gréasáin (lena n-áirítear do sheoladh IP) a tharchur chuig freastalaithe i Stáit Aontaithe Mheiriceá agus déanfaidh Google an fhaisnéis a stóráil orthu sin. Bainfidh Google úsáid as an fhaisnéis seo ar mhaithe le meastóireacht a dhéanamh ar an úsáid a bhaineann tú as an láithreán gréasáin, cuirtear tuarascálacha le chéile d’oibreoirí láithreán gréasáin maidir le gníomhaíocht ar an láithreán gréasáin agus le seirbhísí eile a sholáthar a bhaineann le gníomhaíocht láithreáin gréasáin agus le húsáid idirlín. D’fhéadfadh Google an fhaisnéis seo a tharchur freisin chuig tríú páirtithe sá chás go gceanglaítear orthu é sin a dhéanamh de réir dlí, nó sa chás go ndéanann tríú páirtithe den sórt sin próiseáil ar an fhaisnéis thar ceann Google. Ní cheanglóidh Google do sheoladh IP le haon sonraí eile atá á gcoinneáil ag Google. Is féidir leat diúltú fianáin a úsáid trí na socruithe cuí ar do bhrabhsálaí, tabhair ar aird le do thoil, áfach, má dhéanann tú é sin go bhféadfadh sé nach mbeadh ar do chumas feidhmiúlacht iomlán an láithreáin gréasáin seo a úsáid. Toilíonn úsáideoirí, trí úsáid a bhaint as láithreán gréasáin an Tionóil Saoránach, go ndéanfaidh Google próiseáil ar shonraí maidir leo ar an mbealach agus chun na gcríoch a leagtar amach thuas. Córais Ríomhphoist agus Ríomhchórais Inmheánacha Déantar óstach ar chórais ríomhphoist agus ríomhchórais inmheánacha an Tionóil Saoránach ar líonra slán Roinn an Taoisigh agus tá siad faoi chosaint ag bearta slándála éagsúla, lena n-áirítear, ballaí dóiteáin faoi stiúir tionscal, lena chinntiú nach féidir ach le foireann an Tionóil Saoránach amháin córais agus sonraí an Tionóil Saoránach a rochtain agus tá na sonraí seo á gcoinneáil sábháilte agus slán. Athbhreithniú Thug an Tionól Saoránach a chuid breithniúcháin féin chun críche ag a chruinniú deiridh an 14/15 Aibreán 2018 agus cuirfear clabhsúr ar Rúnaíocht an Tionóil. Ní dhéanfaidh an Tionól aon teagmháil eile le Comhaltaí, Soláthróirí, Saineolaithe, Cainteoirí, Rannpháirtithe nó leis an bpobal i gcoitinne nuair a bheidh obair an Tionóil tugtha chun críche. Freastalóidh an Tionól ar a chuid oibleagáidí, áfach, faoin Acht um Chartlanna Náisiúnta maidir le taifid a choimeád, agus le taifid a aistriú chuig an gCartlann Náisiúnta tar éis 30 bliain. Táimid ag súil le teagmháil íosta a bheith againn leis na daoine aonair agus leis na grúpaí atá luaite roimhe seo ón 25 Bealtaine 2018 ar aghaidh. Déanfar athbhreithniú ar an mBeartas seo de réir mar is cuí i bhfianaise forbairtí reachtaíochta nó aon fhorbairtí ábhartha eile.