http___www.welfare.ie_ga_Pages_disclaimer.aspx_1.xml
1.1 2.1 3.1 3.2 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 32.2 32.3 32.4 32.5 32.6 33.1 33.2 33.3 34.1 34.2 34.3 34.4 34.5 34.6 34.7 35.1 36.1 36.2 36.3 37.1 37.2 37.3 37.4 38.1 39.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 53.2 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 61.2 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 74.1 74.2 74.3 75.1 75.2 75.3 75.4 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 87.2 88.1 88.2 89.1 90.1 90.2 91.1 92.1 92.2 93.1 94.1 95.1 96.1 97.1 98.1 98.2 99.1 100.1 101.1 102.1 103.1 104.1 105.1 106.1 107.1 108.1 109.1 109.2 109.3 110.1 111.1 111.2 112.1 113.1 113.2 114.1 115.1 116.1 117.1 118.1 119.1 119.2 119.3 120.1 120.2 120.3 120.4 121.1 122.1 123.1 123.2 123.3 124.1 125.1 125.2 125.3 125.4 126.1 126.2 127.1 128.1 129.1 130.1 130.2 131.1 131.2 132.1 133.1 133.2 133.3 134.1 134.2 134.3 135.1 136.1 136.2 137.1 137.2 138.1 139.1 139.2 140.1 140.2 140.3 141.1 141.2 142.1 143.1 143.2 144.1 144.2 145.1 146.1 147.1 147.2 148.1 148.2 149.1 150.1 150.2 151.1 151.2 151.3 152.1 152.2 153.1 154.1 155.1 156.1 157.1 157.2 158.1 159.1 160.1 161.1 162.1 163.1 164.1 165.1 165.2 166.1 166.2 166.3 167.1 168.1 168.2 168.3 169.1 169.2 170.1
To view this page in Irish please click here. Table of Contents Introducation What is GDPR? Data Privacy Summary Section 1: Who We Are Section 2: When We Collect Your Information Section 3: What Types of Personal Data do we Collect? Section 4: The Legal Basis For Processing Section 5: The Categories of processing Undertaken by this Department Section 6: Where do we store your personal data? - 1.1 The Data Controller 1.2 The Data Protection Officer Section 7: Sharing Personal Data - 6.1 Electronic Storage of Your Personal Data - 6.2 Storage of Hard Copy (Paper) Files Section 8: How long will we keep your Personal Data? Section 9: Additional processing of Personal Data? - 7.1 Categories of Recipients with Whom We May Share Your Personal Data - 7.2 Will Your Personal Data be Transferred out of The European Economic Area? - 7.3 Are We Allowed To Transfer Your Data Outside of The EU And EEA? - 7.4 Are There Any Other Appropriate and Suitable Safeguards? Section 10: Your rights as a Data Subject - 9.1 Will Your Personal Data Collected Be Used For Any Other Purposes? Section 11: Further information - Operational Guidelines Appendix 1: List Of Primary And Secondary Legislation Under Which We Have the Authority to Collect - 10.1 The Right to Access to Your Personal Data (The Information That We Have On You) - 10.2 The Right to the Correction of Incorrect Personal Data Held By The Department And The Right To Object To The Processing Data Which May Be Incorrect - 10.3 The Right to The Erasure of Personal Data - 10.4 The Right to Object To Automated Decision Making By the Department - 10.5 The Right to Data Portability (The Right to Receive Your Data From One Controller To Send It To Another) - 10.6 The Right to Be Notified of a Data Breach - 10.7 How to Get In Touch With Us? - 10.8 How Can You Exercise Your Rights? GDPR is the European Union General Data Protection Regulation. It comes into effect from 25 May 2018. It sets out a series of new EU laws concerning how data can be processed and used by organisations. The objective of the Regulation is to strengthen and standardise data protection laws for all EU citizens. This Regulation will apply to any organisation that collects and stores personal data (a Data Controller) and also any other organisation working on the instructions of the Data Controller (a Data Processor). Those responsible for adhering to this Regulation include employees of the relevant organisation, including contractors, consultants, agents and third parties who have access to data either directly or indirectly. GDPR very significantly increases the obligations and responsibilities for organisations in how they collect, use and protect personal data. At the centre of the new law is the requirement for organisations to be fully transparent about how they are using and safeguarding personal data, and to be able to demonstrate accountability for their data processing activities. Further information on GDPR and the steps to take in ensuring compliance is available on the website of the Data Protection Commission (DPC) at GDPRandYou.ie or dataprotection.ie. The Department of Employment Affairs and Social Protection take your privacy seriously. It is important that you know what we do with personal information that you and others provide to us, why we gather it and what it means to you. This document is being provided to you in line with our obligations under the General Data Protection Regulation (GDPR). From 25 May 2018, the GDPR, together with applicable Irish requirements, will amend existing data protection law and place enhanced accountability and transparency obligations on all organisations using your information. The GDPR will also introduce changes which will give you greater control over your personal information. Please take time to read this notice carefully. If you have any questions about how we use your information, please contact our Data Protection Officer at the details below. 1.1 The Data Controller The Department of Employment Affairs and Social Protection (DEASP) is the Data Controller for all personal data collected for the purpose of its business. The Department decides what personal data we need to collect from you to allow us to operate our schemes and services. Our data processes are then documented and issued to relevant staff. Each week, some 1.4 million people receive a social welfare payment. In the region of 625,000 families receive child benefit payments in respect of 1.2 million children each month. There are some 6,500 staff directly employed in the Department. Operational guidelines for all our schemes are available on our website www.welfare.ie. You can contact the Department in any of the following ways: By e-mail: info@welfare.ie By post: The Department of Employment Affairs and Social Protection, Aras Mhic Dhiarmada, Store Street, Dublin 1. 1.2 The Data Protection Officer If you are concerned about what we do with your personal data, contact our Data Protection Officer (DPO). You can contact our DPO in any of the following ways: By e-mail: dpo@welfare.ie By post: Data Protection Officer, Department of Employment Affairs and Social Protection, Goldsmith House, Pearse Street, Dublin 2. We collect information about you for a range of reasons and from a number of sources, as well as from yourself. The common situations where we collect personal data are as follows:- 2.1 When you register for a Personal Public Services Number (PPSN); 2.2 When you start work – we collect data on your social insurance contributions and receive information your income from the Revenue Commissioners and from your employer’s end-of-year returns; 2.3 When you make a claim for any of our schemes or services, either in person or online; 2.4 When you are in receipt of a payment and notify us of a change in your circumstances; 2.5 When we undertake a review of any claim; 2.6 When you have a child – with the child also being registered for a PPSN; 2.7 We would also receive information from other Government Departments, for example in relation to childcare applications from the Department of Children and from certain State agencies – such as from SUSI in relation to grant applications for third level colleges; 2.8 The Department also has a range of contractors which would collect information from you for the Department. These are all covered by legal contracts and would include Branch Offices, Local Employment Services, Jobs Clubs and Job Path providers; 2.9 We may also collect data from TDs or Councillors acting on your behalf, or from other people, approved by you to act on your behalf. 3.1 It is the Department’s policy to only collect the information that is required for the immediate purpose, such as those outlined in section 5 below. 3.2 Personal data we collect can include the following: - your name, - your address, - your date of birth, - Your Personal Public Services Number (ppsn), - your marital status, - your family status, - your phone number, - your email address and - certain financial information. 3.3 At times, we also need to collect personal data, such as health data and data such as photographs used for the purpose of identification. This may also include information concerning trade union membership. We acknowledge that we can also collect, indirectly, data in relation to the religious beliefs and sexual orientation of our customers. 4.1 The Department has a number of Acts under which personal data may be legally processed. Our main legislation is included in the Social Welfare Consolidation Act, 2005, as amended. However, we have a number of other pieces of primary and secondary legislation which allows us to process personal data. Should you wish to know more about these, please see the list which is included as an appendix to this document. 4.2 The Department is also entitled to process personal data under other legislative provisions that provide the basis for all Government Departments to administer the range of services and supports as set out by successive Government decisions. We process personal data for the following purposes: 5.1 To provide personal public service numbers (PPSNs) and Public Service Cards (PSCs) 5.2 To collect your social insurance contributions which you use to qualify for certain schemes and payments – for example State Pension 5.3 To check if you qualify for the one of our working age or illness related schemes and if so, to pay the relevant amount to you 5.4 To process applications for any of the range of supports that we provide and for related services 5.5 To provide services and supports to employers 5.6 To provide supports for people who lose their jobs due to redundancy or the insolvency of an employer 5.7 To handle contracts with external service providers 5.8 To deal with customer service queries or complaints 5.9 For internal human resources functions In certain situations, data may also be shared with other organisations, in accordance with legislation and as outlined in Section 5 below. In all cases, data sharing arrangements will be in place. Note: The Department undertakes to ensure that Data Protection Impact Assessments are conducted before any new data process is started and to update this document accordingly. In line with the GDPR, the Department undertakes to consult with its Data Protection Officer and, if necessary, with the Office of the Data Protection Commission before commencing any new data processing activities. 6.1 Electronic Storage of Your Personal Data The majority of personal data stored by the Department is stored electronically on our internal ICT systems. These systems are fully protected by anti-virus and anti-malware software. Electronic data includes scanned copies of application forms, contact information, financial information, family details, educational and training achievements, copies of electronic correspondence, social insurance contributions, employment history and claim history. Access to personal data is restricted to those staff members who need the information to carry-out their official duties. Access is controlled by every staff member having a unique login username and password and with usernames being linked to the minimum permissions necessary to allow the staff member to work in a secure environment and to only access the personal data that they need for their jobs. 6.2 Storage of Hard Copy (Paper) Files Where the Department holds paper records containing your personal data, these are stored on individual files which are secured on our premises and where only our staff can access them. This is achieved through physical security, where access to a Department office is by a swipe card or access card and where visitors are screened, signed in and accompanied by a member of staff, so that they cannot access any personal data stored by the Department. In addition, our staff members are not allowed to deal with claims from relatives and close friends. 7.1 Categories of Recipients with Whom We May Share Your Personal Data The Department is allowed to share your data with a range of organisations, but only where legally enforceable data sharing agreements are in place. In addition, the Social Welfare Consolidation Act allows that the Department can share a person’s public service identity* details with a range of organisations that are listed in schedule 5 of that Act. In general, the types of organisations that the Department would normally share information with are as follows:- - 7.1.1 Government Departments, including the Revenue Commissioners and the Department of Education and Skills, to provide for a range of shared services, supports and statistical information; - 7.1.2 Other public sector bodies or agencies which provide services or supports to customers such as Túsla, Pobal, SUSI, Education & Training Boards etc; - 7.1.3 Community organisations providing activation supports, work placement schemes or training and education courses (such as Tús schemes, Community Employment Schemes, local training initiatives etc); - 7.1.4 Private contractors providing key services and supports to customers, including Branch Managers, Local Employment Service companies, Jobs Clubs and JobPath providers; - 7.1.5 Regulators or supervisory authorities; - 7.1.6 Public representatives who make representations on behalf of constituents; - 7.1.7 IT consultants and general contractors hired by the Department, where they may be working on enhancing DEASP data handling systems & processes. *Public Service Identity information includes your name, date & place of birth, contact information and nationality – used to confirm identity for services that are being provided 7.2 Will Your Personal Data be Transferred out of The European Economic Area? No, your personal data will generally not be stored outside the European Union or the European Economic Area or EEA (EU 27, plus Iceland, Norway, and Liechtenstein). Where we do share information outside the EEA or if there are exceptional arrangements for storage of your data outside the EEA, we will always take steps to ensure that any transfer of information outside of the EEA is carefully managed to protect your privacy rights under the GDPR. This is provided for under EU Social Security Regulations. 7.3 Are We Allowed To Transfer Your Data Outside of The EU And EEA? We may transfer information about you to a country or international organisation outside the EEA. We will always take steps to ensure that any transfer of information is carefully managed to protect your privacy rights in accordance with Data Protection law. 7.4 Are There Any Other Appropriate and Suitable Safeguards? Personal data may only transferred if appropriate safeguards are provided and on the condition that enforceable data subject rights and effective legal remedies are available. Appropriate safeguards may include: - 7.4.1 Legally binding and enforceable instruments between public authorities/bodies; - 7.4.2 Binding corporate rules; - 7.4.3 Standard data protection clauses adopted by a Supervisory Authority and approved or adopted by the EU Commission; - 7.4.4 Standard contractual clauses between controller/processor and recipient in the third country or international organisation. 8.1 We will keep information relating to you for only as long as required to provide you with access to supports and services. DEASP has an overall policy that states that certain personal data will be kept at least for the lifetime of a customer. There are a number of reasons for this. 8.2 The main reasons are that we need to keep your social insurance contribution data to figure out what benefits you might be entitled to in the future, for example, the State Pension. Some of these entitlements may even pass to your dependents! Also, we must keep any past claims information in case there might be future appeals where we may need to refer to the original documents (or scanned copies of these). We must also adhere to the rules of the National Archives’ Office for disposal of records and various other administrative and legal requirements. 8.3 However, the GDPR states that we cannot store any information for longer than is required and therefore each business area is also responsible for the data that it collects, for business reasons, which doesn’t need to be retained indefinitely. 8.4 It would normally be the case that such data is deleted after 7 years, in accordance with the national archives rules that apply to the business area, but each area will consider the issues affecting the storage of personal data. 8.5 Where data is captured and required for specific reasons and does not need to be retained beyond a set timeframe, then this data will be deleted as soon as its purpose has been served. An example of this is where the Department may generate customer lists for invitations to jobs fairs. These lists would then be deleted once the event that they were prepared for has concluded. 9.1 Will Your Personal Data Collected Be Used For Any Other Purposes? As mentioned earlier, we are allowed by law to collect and process personal data for a range of reasons. We are also allowed to collect your data for a specific reason and use it for another related purpose. This is because the Department provides a wide range of related services and it would be impractical for us to keep asking you for the same information over and over again. Again, the Social Welfare Consolidation Act allows us to collect information for a specific purpose and use it for related purposes – for other schemes and supports offered by the Department in the area of Social Protection, or for statistical purposes. 9.2 An example of this is that information may be supplied by a customer for a Jobseekers claim, but this information may be used to later provide education or training supports. In this way, we will be better able to help this customer to find another job. 9.3 Another example is that information that may be provided by a customer for a State Pension and this information might be used to allow the customer to receive a free-travel pass or a household benefits package. All our customers (data subjects) have certain rights under EU (General Data Protection Regulation or GDPR) and Irish data protection legislation: 10.1 The Right to Access to Your Personal Data (The Information That We Have On You) You are entitled to ask us for copies of any of your personal data that we have collected and stored. Such requests can be submitted in writing or by e-mail to the Data Protection Officer at the address listed at 1.2 above. You will understand that we may need to verify your identity before we deal with any request for copies of your personal data. Under the GDPR, we normally have 30 days in which to process these requests. 10.2 The Right to the Correction of Incorrect Personal Data Held By The Department And The Right To Object To The Processing Data Which May Be Incorrect We always try to make sure that the information we have about you is accurate and up-to-date. Sometimes we may ask you to verify this information. If your information changes or you believe that we have information which is not up-to-date, please let us know. You are entitled to ask the Department to update any incorrect personal data that we may have in relation to you. We are always happy to do so, once we again verify your identity. We cannot allow anyone else but yourself to update your personal data, unless you have a fully authorised personal representative. 10.3 The Right to The Erasure of Personal Data As mentioned, the Department has an overall data retention policy that states that some customer data may be retained indefinitely, for various reasons. Where data is held or required for the ongoing administration of social security, then this data will not be subject to erasure, even if requested by the data subject. However, each business area should only retain data for as long as is required for the purpose for which the data was collected. You have the right to seek that the Department deletes any information which is not required, for ongoing business reasons, to be retained indefinitely. 10.4 The Right to Object To Automated Decision Making By the Department The GDPR gives you the right to object to automated decision making by DEASP computer systems, where there is a legal or significant impact on you as a customer. An automated decision is a decision which is made entirely by a computer system, without the intervention of one of our officers. We do use a number of automated processes, but in all cases, the automated decision is limited to successful awards. You will only receive an automated notification if you have been successful in your claim. This means, where a computer system indicates that you may not qualify for a payment, the computer will refer your application to one of our officers for checking and if you have been unsuccessful, it is that officer who will correspond with you, not the machine. In this way, there is no situation in the Department where a customer will be refused payment by a machine, or computer system. In addition, customers always have the right to appeal against a decision made by the Department. 10.5 The Right to Data Portability (The Right to Receive Your Data From One Controller To Send It To Another) Data subjects (customers) have the right to request their data from one controller, so that it can be given to another controller (company). This right is relevant to organisations such as utilities, financial institutions or even social media sites with which you have a contract and where you may wish to seek to change provider or possibly get a better deal. This right says that you can get your personal data in a structured, commonly used, machine-readable format to pass on to another organisation. In the event of any customer asking for their rights under data portability, the Department may have to ask for what specific data is required but we will try to provide the information as quickly as possible. 10.6 The Right to Be Notified of a Data Breach As a customer, we are also obliged to let you know when your personal data may have been lost, destroyed or given to a person or organisation who shouldn’t have received it. The Department of Employment Affairs and Social Protection (DEASP) has a range of security measures in place to protect your personal data. It would be very rare that one person’s personal data would accidentally be sent to another person or where any of the personal data stored by DEASP would be lost or stolen. However, in the unlikely event that a data breach happens, the Department will write out to you to confirm what happened and which of your data was affected. We will also inform the Office of the Data Protection Commissioner, should they wish to undertake an investigation. 10.7 How to Get In Touch With Us? If you have any queries about this policy, please contact the Data Protection Officer (DPO). The DPO for the Department can always be contacted at DPO@welfare.ie The Department works hard to handle your data responsibly and we take our data protection responsibilities seriously. If you are unhappy about the way that we do this, please contact the DPO. We hope that the DPO will be able to address any concerns that you have. However, you also have the right to complain to the Office of the Data Protection Commissioner (ODPC). The ODPC can be contacted:- By post to: Canal House, Station Road, Portarlington, R32 AP23, Co. Laois. By e-mail: info@dataprotection.ie By phone: 0761 104 800 or lo call number 1890 252 231 10.8 How Can You Exercise Your Rights? We must allow you to use the rights outlined above. You can make a request under any of these rights by contacting the Department’s DPO at this address: By e-mail: dpo@welfare.ie By post: Data Protection Officer, Department of Employment Affairs and Social Protection, Goldsmith House, Pearse Street, Dublin 2. We may need you to confirm your identity first, as we cannot give your personal data to others. Once we have verified your identity, we will seek to get the information that you have requested as soon as possible. However, we are committed to updating you on our progress within 30 days. For complex requests or where there are large numbers of requests, we can extend our time to respond to you by a further 60 days (two months), but we must tell you we are going to do this within the first 30 days, together with the reason for the delay. If we are not going to respond to your request we must tell you this within 30 days. We must remind you that that you have the options of complaining to the ODPC. If you make an electronic request, we must respond to you electronically, unless you prefer otherwise. Anything we do in response to your request and any information we give you must be free. If you make excessive requests (e.g. make the same one repeatedly) or your requests have no basis in fact, we may either charge you a fee or refuse to act on it. We will not charge you a fee where you have made a mistake, such as the wrong location, but will not act on your request. Due to the size of the organisation, we may ask you to clarify your request. You can help us to fulfil your request about personal data by being as specific as possible particularly about your dealing or contacts with us. If you would like any more information on how an area of the Department works and what is required to make a decision on a claim or service, then please go to our website at www.welfare.ie. Information on each of our schemes includes operational guidelines.
1.1 2.1 2.2 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 30.2 30.3 30.4 30.5 30.6 31.1 31.2 31.3 32.1 33.1 33.2 33.3 33.4 33.5 33.6 33.7 34.1 35.1 35.2 35.3 36.1 36.2 36.3 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 53.2 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 61.2 62.1 63.1 64.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 74.1 74.2 75.1 76.1 76.2 76.3 76.4 77.1 78.1 79.1 80.1 81.1 82.1 84.1 85.1 86.1 87.1 88.1 88.2 89.1 90.1 91.1 91.2 92.1 93.1 93.2 95.1 96.1 97.1 98.1 99.1 100.1 100.2 101.1 102.1 103.1 104.1 105.1 106.1 107.1 108.1 109.1 110.1 111.1 111.2 111.3 112.1 113.1 113.2 114.1 115.1 115.2 116.1 117.1 118.1 119.1 120.1 120.2 120.3 121.1 121.2 121.3 121.4 122.1 123.1 124.1 124.2 124.3 125.1 126.1 126.2 126.3 126.4 127.1 127.2 128.1 129.1 130.1 131.1 131.2 132.1 132.2 133.1 134.1 134.2 134.3 135.1 135.2 135.3 136.1 137.1 137.2 138.1 138.2 139.1 140.1 140.2 141.1 141.2 141.3 142.1 142.2 143.1 144.1 144.2 145.1 145.2 146.1 147.1 148.1 148.2 149.1 149.2 150.1 150.2 151.1 152.1 152.2 153.1 153.2 153.3 154.1 154.2 155.1 155.2 156.1 157.1 158.1 159.1 159.2 160.1 161.1 161.2 162.1 162.2 162.3 163.1 164.1 164.2 164.3 165.1 165.2 166.1 166.2
Clár Ábhar RÉAMHRÁ: CAD É AN RGCS? ACHOIMRE AR PHRÍOBHÁIDEACHAS SONRAÍ MÍR 1: CÉ SINN FÉIN MÍR 2: NUAIR A BHAILÍMID D’FHAISNÉIS MÍR 3:CÉN SAGHSANNA SONRAÍ PEARSANTA A BHAILÍMID? MÍR 4: AN BUNÚS DLÍ LE PRÓISEÁIL MÍR 5: NA CATAGÓIRÍ PRÓISEÁLA FAOINA DTUGANN AN ROINN SEO MÍR 6: CÁ STÓRÁLAIMID DO SHONRAÍ PEARSANTA? - 1.1 An Rialaitheoir Sonraí 1.2 An tOifigeach Cosanta Sonraí MÍR 7: NA CATAGÓIRÍ PRÓISEÁLA FAOINA DTUGANN AN ROINN SEO - 6.1 Stóráil leictreonach do shonraí pearsanta - 6.2 Comhaid chruachóipe (pháipéir) a stóráil MÍR 8:CÉ CHOMH FADA A CHOIMEÁDFAIMID DO SHONRAÍ PEARSANTA? MÍR 9: PRÓISEÁIL BHREISE SONRAÍ PEARSANTA - 7.1 Catagóirí faighteoirí ar féidir linn do shonraí pearsanta a roinnt leo - 7.2 An aistreofar do Shonraí Pearsanta amach ón LEE? - 7.3 An gceadaítear dúinn do shonraí a aistriú taobh amuigh den AE agus den LEE? - 7.4 An bhfuil aon Chosaintí Cuí agus Oiriúnacha eile ann? MÍR 10:DO CHEARTA MAR ÁBHAR SONRAÍ - 9.1 An úsáidfear do shonraí pearsanta a bailíodh ar aon chuspóirí eile? MÍR 11: BREIS FAISNÉISE - TREOIRLÍNTE OIBRÍOCHTÚLA - 10.1 An ceart chun rochtain a fháil ar do shonraí pearsanta (nó an fhaisnéis atá againn fút) - 10.2 An ceart go gceartaítear sonraí pearsanta míchearta atá á gcoimeád ag an Roinn agus an ceart chun cur in aghaidh sonraí a phróiseáil a d’fhéadfadh bheith mícheart - 10.3 An ceart chun sonraí pearsanta a scriosadh - 10.4An ceart chun cur in aghaidh cinnteoireacht uathoibrithe ag an Roinn - 10.5 An ceart i leith iniomparthacht sonraí (an ceart chun do shonraí a fháil ó rialaitheoir amháin agus iad a sheoladh chuig rialaitheoir eile) - 10.6 An ceart go gcuirfear ar an eolas thú ar Shárú ar Shonraí - 10.7 An ceart chun gearán a dhéanamh le hOifig an Chohimisinéara Cosanta Sonraí (an OCCS) - 10.8 Conas is féidir leat do chearta a fheidhmiú Is é an RGCSan Rialachán Ginearálta um Chosaint Sonraí. Tiocfaidh sé i bhfeidhm ón 25 Bealtaine 2018 ar aghaidh. Leagtar amach ann sraith dlíthe nua AE a bhaineann le conas is féidir le heagraíochtaí sonraí a phróiseáil agus úsáid. Is é cuspóir an rialacháin chun dlíthe um chosaint sonraí a threisiú agus a chaighdeánú do gach saoránach AE. Bainfidh na rialacháin seo le haon eagraíocht a bhailíonn agus a stórálann sonraí pearsanta (Rialaitheoir Sonraí) agus le haon eagraíocht eile, chomh maith, a oibríonn ar threoracha an Rialaitheora Sonraí (Próiseálaí Sonraí). I measc iad siúd atá freagrach as cloí leis na rialacháin seo, tá fostaithe na heagraíochta ábhartha, conraitheoirí, sainchomhairleoirí, gníomhairí agus tríú páirtithe ina measc a bhfuil teacht acu ar shonraí cé acu go díreach nó go hindíreach. Méadaítear san RGCS go suntasach na hoibleagáidí agus freagrachtaí d’eagraíochtaí i dtaobh conas a bhailíonn, a úsáideann agus a chosnaíonn siad sonraí pearsanta. Ag croílár an dlí nua, tá an ceanglas ar eagraíochtaí a bheith go hiomlán trédhearcach faoi conas a úsáideann agus a chosnaíonn siad sonraí pearsanta, agus a bheith in ann cuntasacht a léiriú dá ngníomhaíochtaí próiseála sonraí. Tá breis faisnéise faoin RGCS agus na bearta atá le glacadh lena chinntiú go mbíonn comhlíonadh ar fáil ar láithreán gréasáin an Choimisiúin Chosanta Sonraí (an CCS) ag GDPRandYou.ie nó GDPRandYou.ie nó dataprotection.ie. Achoimre ar Phríobháideachas Sonraí Caitheann an Roinn Gnóthaí Fostaíochta agus Coimirce Sóisialaí le do phríobháideachas mar ábhar tromchúiseach. Is tábhachtach gurb eol duit an méid a dhéanaimid le faisnéis phearsanta a sholáthraíonn tú agus daoine eile dúinn, cén fáth go mbailímid é agus cad a chiallaíonn sin duit. Tá an cháipéis seo á cur ar fáil duit ar aon dul lenár n-oibleagáidí faoin Rialachán Ginearálta um Chosaint Sonraí (an RGCS). Ón 25 Bealtaine 2018 ar aghaidh, leasóidh an RGCS, sa mhullach ar cheanglais infheidhme Éireannacha, an dlí reatha um chosaint sonraí agus leagfaidh sé oibleagáidí barrfheabhsaithe cuntasachta agus trédhearcachta ar gach eagraíocht a úsáideann d’fhaisnéis. Tabharfar athruithe isteach, chomh maith, san RGCS, a thabharfaidh smacht níos fearr duit ar d’fhaisnéis phearsanta. Iarrtar ort an t-am a ghlacadh chunan fógra seo a léamh go cúramach. Má bhíonn aon cheisteanna agat maidir leis an mbealach a úsáidimid d’fhaisnéis, déan teagmháil, le do thoil, lenár nOifigeach Cosanta Sonraí trí leas a bhaint as na sonraí thíos. 1.1 An Rialaitheoir Sonraí Is é an Roinn Gnóthaí Fostaíochta agus Coimirce Sóisialaí (an RGFCS) an Rialaitheoir Sonraí do na sonraí pearsanta go léir a bailíodh ar mhaithe le cuspóir a gnó. Cinneann an Roinn cén sonraí pearsanta a theastaíonn uainn a bhailiú uait lena chur ar ár gcumas ár scéimeanna agus seirbhísí a oibriú. Ansin déantar á bpróisis sonraí a dhoiciméadú agus a eisiúint don fhoireann ábhartha. Gach seachtain, faigheann thart ar 1.4 milliún duine íocaíocht leasa shóisialaigh.Faigheann thart ar 625,000 teaghlach íocaíochtaí sochair linbh i dtaca le 1.2 milliún leanbh gach mí. Tá thart ar 6,500 comhalta foirne fostaithe go díreach sa Roinn. Tá treoirlínte oibríochtúla ar fáil dár scéimeanna go léir ar ár láithreán gréasáin www.welfare.ie. Féadfaidh tú teagmháil a dhéanamh leis an Roinn ar aon cheann de na bealaí seo a leanas: Ar ríomhphost: info@welfare.ie Ar an nguthán: 071 9193302 or 1890 66 22 44 (LoCall) Sa phost: An Roinn Gnóthaí Fostaíochta agus Coimirce Sóisialaí, Aras Mhic Dhiarmada, Sráid an Stórais, Baile Átha Cliath 1. 1.2 An tOifigeach Cosanta Sonraí Má tá tú buartha faoin méid a dhéanaimid le shonraí pearsanta, déan teagmháil lenár nOifigeach Cosanta Sonraí (OCS). Féadfaidh tú teagmháil a dhéanamh lenár OCS ar aon cheann de na bealaí seo a leanas: Ar ríomhphost: dpo@welfare.ie Sa phost: An tOifigeach Cosanta Sonraí, An Roinn Gnóthaí Fostaíochta agus Coimirce Sóisialaí, Teach Goldsmith, Sráid an Phiarsaigh, Baile Átha Cliath 2. Bailímid faisnéis fút ar réimse cúiseanna agus ó roinnt foinsí, agus uait féin. Seo a leanas nagnáthchásanna ina mbailímid sonraí pearsanta:- 2.1 Nuair a chláraíonn tú d’Uimhir Pearsanta Seirbhíse Poiblí UPSP); 2.2 Nuair a thosaíonn tú ag oibriú – bailímid sonraí faoi do ranníocaíochtaí árachais shóisialaigh agus faighimid faisnéis faoi d’ioncam ó na Coimisinéirí Ioncaim agus ó thuairisceáin deireadh bliana d’fhostóra; 2.3 Nuair a dhéanann tú éileamh ar aon chinn dár scéimeanna nó seirbhísí, cé acu i bpearsan nó ar líne; 2.4 Nuair a bhíonn íocaíocht á fáil agat agus nuair a chuireann tú in iúl dúinn gur tháinig athrú ar do chúinsíp> 2.5 Nuair a thugaimid faoi athbhreithniú ar aon éileamh;; 2.6 Nuair a bhíonn leanbh agat – agus nuair a bhíonn an leanbh cláraithe, chomh maith, do UPSP; 2.7 Gheobhaimis faisnéis, chomh maith, ó Ranna Rialtais eile, mar shampla, maidir le iarratais ar chúram leanaí ón Roinn Leanaí agus ó ghníomhaireachtaí Stáit áirithe – ar nós ó SUSI maidir le hiarratais ar dheontas do choláistí tríú leibhéal;; 2.8 Tá réimse conraitheoirí ag an Roinn, chomh maith, a bhaileodh faisnéis uait don Roinn. Tá iad seo go léir cumhdaithe ag conarthaí dlíthiúla agus d’áireofaí leo Oifigí Brainse, Seirbhísí Fostaíochta Áitiúla, Clubanna Post agus soláthraithe Job Path; 2.9 Féadfaimid sonraí a bhailiú ó TDanna nó Comhairleoirí, chomh maith, a ghníomhaíonn thar do cheann, nó ó dhaoine eile, a fhaomhann tú chun gníomhú thar do cheann. 3.1 Is é beartas na Roinne gan ach an fhaisnéis a bhailiú a theastaíonn don chuspóir láithreach, ar nós iad siúd a dtugtar cuntas orthu i mír 5 thíos. 3.2 Féadtar a áireamh leis na sonraí pearsanta a bhailímid an méid seo a leanas: d’ainm, - do sheoladh, - do dháta breithe, - do stádas pósta, - stádas do theaghlaigh, - d’uimhir ghutháin, - do sheoladh ríomhphoist agus - faisnéis airgeadais áirithe. 3.3 Uaireanta, is gá dúinn freisin sonraí pearsanta a bhailiú, amhail sonraí sláinte agus sonraí amhail grianghraif in úsáid chun cuspóra aitheantais. Seans go n-áirítear leis sin faisnéis a bhaineann le ballraíocht le ceardchumann. Aithnímid gur féidir linn sonraí a bhailiú freisin, go hindíreach, a bhaineann le creidimh reiligiúnacha agus gnéaschlaonadh ár gcustaiméirí. 4.1 Tá roinnt Achtanna ag an Roinn faoinar féidir sonraí pearsanta a phróiseáil go dlíthiúil. Tá ár bpríomhreachtaíocht cuimsithe san Acht Leasa Shóisialaigh (Comhdhlúthú), 2005, arna leasú. Tá roinnt píosaí eile de phríomhreachtaíocht agus reachtaíocht thánaisteach ann a cheadaíonn dúinn sonraí pearsanta a phróiseáil. Más mian leat níos mó eolais a fháil fúthu siúd, féach an liosta, le do thoil, atá curtha san áireamh mar aguisín leis an gcáipéis seo.. 4.2 Tá an Roinn i dteideal, chomh maith, chun sonraí pearsanta a phróiseáil faoi fhorálacha reachtaíochta eile a sholáthraíonn an bonn do gach Roinn Rialtais chun an réimse seirbhísí agus tacaíochtaí a riar faoi mar a leagtar amach i gcinntí leanúnacha Rialtais. Próiseálaimid sonraí pearsanta ar na cuspóirí seo a leanas: 5.1 Chun uimhreacha pearsanta seirbhíse poiblí (UPSPanna) agus Cártaí Seirbhísí Poiblí (CSPanna) a sholáthar 5.2 Do ranníocaíochtaí árachais shóisialaigh a bhailiú a úsáideann tú chun cáiliú do scéimeanna agus íocaíochtaí áirithe – Pinsean Stáit, mar shampla 5.3 A sheiceáil an gcáilíonn tú do cheann dár scéimeanna aois oibre nó breoiteachta agus má cháilíonn, an méid ábhartha a íoc leat 5.4 Iarratais a phróiseáil d’aon chinn den réimse tacaíochtaí a sholáthraímid agus do sheirbhísí gaolmhara 5.6 Tacaíochtaí a sholáthar do dhaoine a gcailleann a bpoist mar gheall ar iomarcaíocht nó dócmhainneacht fostóra 5.7 Conarthaí a láimhseáil le soláthraithe seirbhíse seachtracha 5.8 Déileáil le ceisteanna nó gearáin maidir le seirbhís do chustaiméirí 5.9 Le haghaidh feidhmeanna acmhainní daonna inmheánacha I gcásanna áirithe, féadtar sonraí a roinnt, chomh maith, le heagraíochtaí eile, i gcomhréir leis an reachtaíocht agus faoi mar a dtugtar cuntas air i Mír 5 thíos. I ngach cás, beidh socruithe roinnte sonraí i bhfeidhm. Nóta: Tugann an Roinn faoina chinntiú go dtugtar faoi Mheasúnacht Tionchair um Chosaint Sonraí sula dtosaítear aon phróiseas nua sonraí agus chun an cháipéis seo a nuashonrú dá réir.Ar aon dul leis an RGCS, tugann an Roinn faoi dhul i gcomhairle lenahOifigeach Cosanta Sonraí agus, más gá, le hOifig an Choimisiúin Chosanta Sonraí sula gcuirtear tús le haon ghníomhaíochtaí nua próiseála sonraí. 6.1 Stóráil leictreonach do shonraí pearsanta Stóráiltear tromlach na sonraí pearsanta a stórálann an Roinn go leictreonach ar ár gcórais inmheánacha TFC. Tá na córais seo are go hiomlán cosanta ag bogearraí frithvíris agus frithmhailíseacha. Áirítear le sonraí leictreonacha cóipeanna scanta d’fhoirmeacha iarratais, faisnéis teagmhála, faisnéis airgeadais, sonraí teaghlaigh, éachtaí oideachais agus oiliúna, cóipeanna de chomhfhreagras leictreonach, ranníocaíochtaí árachais shóisialaigh, stair fostaíochta agus stair éilimh. Níl rochtain ar shonraí pearsanta ach ag na comhaltaí foirne siúd a dteastaíonn an fhaisnéis uathu chun tabhairt faoina ndualgais oifigiúla. Rialaítear rochtain mar gheall go bhfuil ainm úsáideora agus pasfhocal uathúil ag gach comhalta foirne agus mar gheall go gceanglaítear ainmneacha úsáideora leis na ceadanna íosta a theastaíonn lena ligean don chomhalta foirne oibriú i dtimpeallacht shlán agus gan ach na sonraí pearsanta a rochtain a theastaíonn uathu dá bpoist 6.2 Comhaid chruachóipe (pháipéir) a stóráil Sa chás go mbíonn taifid pháipéir ag an Roinn ina gcuimsítear do shonraí pearsanta, stóráiltear iad seo i gcomhaid aonair atá á gcoimeád go slán inár n-áitreabh agus níl teacht orthu ach ag ár bhfoireann. Baintear seo amach trí shlándáil fhisiciúil: ní féidir rochtain a fháil ar oifig Roinne ach trí svaidhpchárta nó cárta rochtana agus déantar cuairteoirí a sciathadh, a shíniú isteach agus a thionlacan ag comhalta foirne, chun nach féidir leo aon sonraí pearsanta atá á stóráil ag an Roinn a rochtain. Anuas air sin, ní cheadaítear dár gcomhaltaí foirne déileáil le héilimh ó ghaolta agus dlúthchairde. 7.1 Catagóirí faighteoirí ar féidir linn do shonraí pearsanta a roinnt leo Ceadaítear don Roinn do shonraí a roinnt le réimse eagraíochtaí, ach amháin nuair a bhíonn socruithe roinnte sonraí atá infheidhmithe le dlí i bhfeidhme. Anuas air sin, ceadaítear san Acht Leasa Shóisialaigh (Comhdhlúthú) don Roinn sonraí* aitheantais seirbhíse poiblí duine a roinnt le réimse eagraíochtaí a liostaítear i sceideal 5 den Acht sin. Go ginearálta, seo a leanas saghsanna na n-eagraíochtaí a roinnfeadh an Roinn faisnéis leo, de ghnáth:- - 7.1.1 Ranna Rialtais, na Coimisinéirí Ioncaim agus an Roinn Oideachais agus Scileanna ina measc, chun soláthar a dhéanamh do réimse seirbhísí comhroinnte, tacaíochtaí agus faisnéis staitistiúil; - 7.1.2 Comhlachtaí nó gníomhaireachtaí earnála poiblí eile a sholáthraíonn seirbhísí nó tacaíochtaí do chustaiméirí, ar nós Tusla, Pobal, SUSI, Boird Oideachais agus Oiliúna etc; - 7.1.3 Eagraíochtaí pobail a sholáthraíonn tacaíochtaí gníomhachtaithe, scéimeanna socrúchán oibre agus cúrsaí oideachais (ar nós scéimeanna Tús, Scéimeanna Fostaíochta Pobail, tionscnaimh áitiúla oiliúna etc); - 7.1.4 Conraitheoirí príobháideacha a sholáthraíonn príomhsheirbhísí agus tacaíochtaí do chustaiméirí, Bainisteoirí Brainse, cuideachtaí Seirbhíse Fostaíochta Áitiúla, Clubanna Post agus soláthraithe JobPathina measc; - 7.1.5 Rialálaithe nó údaráis mhaoirseachta; - 7.1.6 Ionadaithe poiblí a dhéanann ionadaíocht thar ceann toghthóirí; - 7.1.7 SainchomhairleoiríTF agus conraitheoirí ginearálta a fhruileann an Roinn, nuair a d’fhéadfaidís bheith ag oibriú ar fheabhas a chur ar chórais agus próisis láimhseála sonraí an RGFCS. *Áirítear le faisnéis faoi Aitheantas Seirbhíse Poiblí d’ainm, dáta agus áit bhreithe, faisnéis teagmhála agus náisiúntacht – úsáidtear seo chun aitheantas a dheimhniú do sheirbhísí atá á soláthar 7.2 An aistreofar do Shonraí Pearsanta amach ón LEE? Ní aistreofar, ní roinnfear do shonraí pearsanta, go ginearálta, lasmuigh den Aontas Eorpach nó denLimistéar Eorpach Eacnamaíochta nó an LEE (AE 27, an Ríocht Aontaithe go dtí Brexit an 29 Márta 2019, an Íoslainn, an Iorua, agus Lichtinstéin). Cá roinnimid faisnéis taobh amuigh den LEE nó más ann do shocruithe eisceachtúla chun do shonraí a stóráil taobh amuigh den LEE, rachaimid i mbun beart i gcónaí lena chinntiú go ndéantar bainistíocht chúramach ar aon aistriú faisnéise taobh amuigh den LEE chun do chearta príobháideachais a chosaint faoin RGCS. Foráiltear dó seo faoi Rialacháin Slándála Sóisialaí an AE. 7.3 An gceadaítear dúinn do shonraí a aistriú taobh amuigh den AE agus den LEE? Féadfaimid faisnéis fút a aistriú chuig eagraíocht Tíre nó idirnáisiúnta lasmuigh den LEE. Rachaimid i mbun beart i gcónaí lena chinntiú go ndéantar bainistíocht chúramach ar aon aistriú faisnéise chun do chearta príobháideachais a chosaint i gcomhréir leis an dlí um Chosaint Sonraí. 7.4 An bhfuil aon Chosaintí Cuí agus Oiriúnacha eile ann? Ní féidir sonraí pearsanta a aistriú má chuirtear na cosaintí cuí ar fáil agus ar an gcoinníoll go mbíonn cearta ábhar sonraí in-fheidhmithe agus réitigh éifeachtacha dhlíthiúla ar fáil. I measc nagcosaintí cuí, d’fhéadfadh an méid seo a leanas a bheith i gceist: - 7.4.1 Ionstraimí atá ina gceangal dlí agus in-fheidhmithe idir údaráis/comhlachtaí poiblí; - 7.4.2 Rialacha corparáideacha ceangailteacha;; - 7.4.3 Clásail chaighdeánacha um chosaint sonraí lenar ghlac Údarás Maoirseachta agus a d’fhaomh a ghlac Coimisiún an AE; - 7.4.4 Clásail chaighdeánacha chonarthacha idir rialaitheoir/próiseálaí agus faighteoir sa tríú tír nó san eagraíocht idirnáisiúnta. 8.1 Ní choimeádfaimid faisnéis a bhaineann leat ach chomh fada sin a theastaíonn chun rochtain a sholáthar duit ar thacaíochtaí agus seirbhísí. Tá beartas foriomlán ag an RGFCS ina luaitear go gcoimeádfar sonraí pearsanta áirithe ar feadh saolré chustaiméara ar a laghad. Tá roinnt cúiseanna leis seo. 8.2 Is iad napríomhchúiseanna gur gá dúinn do shonraí ranníocaíocht árachais shóisialaigh a choimeád lena dheimhniú cén sochair a d’fhéadfá bheith i dteideal a fháil amach anseo, mar shampla, an Pinsean Stáit. D’fhéadfadh roinnt de nateidlíochtaí seo fiú aistriú chuig do chleithiúnaithe! Chomh maith leis sin, caithfimid aon fhaisnéis faoi éilimh roimhe seo a choimeád sa chás go mb’fhéidir go ndéanfar achomhairc amach anseo agus nuair is gá dúinn tagairt do na buncháipéisí (nó cóipeanna scanta díobh seo). Caithfimid cloí, chomh maith, le rialacha Oifig na Cartlainne Náisiúnta i dtaobh taifid a dhiúscairt agus i dtaobh ceanglais éagsúla riaracháin agus dhlíthiúla eile. 8.3Luaitear san RGCS, áfach, nach féidir linn aon fhaisnéis a stóráil ar feadh níos faide ná mar a theastaíonn agus, ar, tá gach limistéar gnó freagrach as, chomh maith, as na sonraí a bhailíonn sé, ar chúiseanna gnó, nach gá a choimeád go deo. 8.4 Ba ghnách go ndéanfaí na sonraí siúd a scriosadh i ndiaidh 7 mbliana, i gcomhréir le rialacha na cartlainne rialacha a bhaineann leis an limistéar gnó, ach déanfaidh gach limistéar breithniú ar na saincheisteanna a dhéanann difear do stóráil sonraí pearsanta. 8.5 Sa chás go mbailítear sonraí agus go dteastaíonn siad ar chúiseanna ar leith agus nach gá iad a choimeád i ndiaidh amfhráma socraithe, scriosfar na sonraí seo a luaithe a comhlíonadh a gcuspóir. Sampla de seo is ea nuair is féidir leis an Roinn liostaí custaiméara a ghiniúint do chuirí chuig aonaigh phost. Scriosfaí na liostaí seo ansin a luaithe a tugadh an t-imeacht dá n-ullmhaíodh iad, chun críche. 9.1 An úsáidfear do shonraí pearsanta a bailíodh ar aon chuspóirí eile?? Faoi mar a luadh thuas, ceadaítear dúinn faoin dlí chun sonraí pearsanta a bhailiú agus a phróiseáil ar réimse cúiseanna. Ceadaítear dúinn, chomh maith, do shonraí a bhailiú ar chúis ar leith agus iad a úsáid ar chuspóir gaolmhar eile. Is amhlaidh atá seo mar gheall ar go soláthraíonn an Roinn réimse fairsing de sheirbhísí gaolmhara agus bheadh sé míphraiticiúil dúinn an fhaisnéis chéanna a iarraidh ort i gcónaí arís agus arís eile. Arís, ceadaítear dúinn faoin Acht Leasa Shóisialaigh chun faisnéis a bhailiú ar chuspóir ar leith agus í a úsáid ar chuspóirí gaolmhara – do scéimeanna agus tacaíochtaí eile a chuireann an Roinn ar fáil i limistéar na Coimirce Sóisialaí, nó ar chuspóirí staitistiúla. 9.2 Sampla de seo is ea gur féidir le custaiméir faisnéis a sholáthar d’éileamh Cuardaitheora Post, ach is féidir an fhaisnéis seo a úsáid chun tacaíochtaí oideachais nó oiliúna a sholáthar ina dhiaidh sin. Ar an mbealach seo, is fearr a bheimid in ann cabhrú leis an gcustaiméir seo chun post eile a aimsiú. 9.3 Sampla eile is ea gur féidir le custaiméir faisnéis a sholáthar do Phinsean Stáit agus féadtar an fhaisnéis seo a úsáid lena ligean don chustaiméir pas saorthaistil nó pacáiste sochair teaghlaigh a fháil. Tá cearta áirithe ag ár gcustaiméirí (ábhair shonraí) go léir faoi reachtaíocht an AE (an Rialachán Ginearálta um Chosaint Sonraí nó an RGCS) agus faoi reachtaíocht um chosaint sonraí na hÉireann: 10.1 An ceart chun rochtain a fháil ar do shonraí pearsanta (nó an fhaisnéis atá againn fút) Tá tú i dteideal iarraidh orainn cóipeanna a thabhairt duit d’aon sonraí pearsanta a bhaineann leat a bhailíomar agus a stórálamar. Is féidir na hiarrataí siúd a sheoladh ar aghaidh i scríbhinn nó ar ríomhphost chuig an Oifigeach Cosanta Sonraí ag an seoladh a liostaítear ag 1.2 thuas. Tuigfidh tú go mb’fhéidir go mbeidh orainn d’aitheantas a dheimhniú sula ndéileálfaimid le haon iarraidh ar chóipeanna de do shonraí pearsanta. Faoin RGCS, is gnách go mbíonn 30 lá againn chun na hiarrataí seo a phróiseáil. 10.2 An ceart go gceartaítear sonraí pearsanta míchearta atá á gcoimeád ag an Roinn agus an ceart chun cur in aghaidh sonraí a phróiseáil a d’fhéadfadh bheith mícheart Déanfaimid iarracht i gcónaí a chinntiú go bhfuil an fhaisnéis atá againn fút is cruinn agus cothrom le dáta. Amanna féadfaimid iarraidh ort an fhaisnéis seo a dheimhniú. Má thagann athrú ar d’fhaisnéis nó má chreideann tú go bhfuil faisnéis againn nach bhfuil cothrom le dáta, cuir ar an eolas sinn, le do thoil. Tá tú i dteideal iarraidh ar an Roinn aon sonraí pearsanta míchearta a nuashonrú a d’fhéadfadh bheith againn fút. Bímid sásta i gcónaí amhlaidh a dhéanamh, a luaithe a dheimhnímid d’aitheantas, arís eile. Ní féidir linn duine ar bith eile a cheadú, seachas tú féin, chun do shonraí pearsanta a nuashonrú, mura bhfuil ionadaí pearsanta agat atá go hiomlán údaraithe*. 10.3 An ceart chun sonraí pearsanta a scriosadh Faoi mar a luadh, tá beartas foriomlán um choinneáil sonraí ag an Roinn ina luaitear gur féidir roinnt sonraí custaiméara a choimeád go deo, ar chúiseanna éagsúla. Sa chás go gcoimeádtar sonraí nó go dteastaíonn siad ar mhaithe le riar leanúnach slándála sóisialaí agus sa chás go bhforáiltear do na sonraí go dlíthiúil, ní bheidh na sonraí seo faoi réir scriosta, fiú má iarrann an t-ábhar sonraí amhlaidh. Níor cheart do gach limistéar gnó, áfach, sonraí a choimeád ach a fhaide sin a theastaíonn don chuspóir dá mbailíodh iad. Tá an ceart agat a lorg go scriosann an Roinn aon fhaisnéis nach dteastaíonn, ar chúiseanna leanúnacha gnó, a choimeád go deo. 10.4 An ceart chun cur in aghaidh cinnteoireacht uathoibrithe ag an Roinn Bronntar an ceart ort san RGCS chun cur in aghaidh cinnteoireacht uathoibrithe ag ríomhchórais an RGFCS, a chás go n-imrítear tionchar dlíthiúil nó suntasach ort mar chustaiméir. Is ionann cinneadh uathoibrithe agus cinneadh a dhéanann ríomhchóras, agus ríomhchóras amháin, gan idirghabháil ag aon duine dár n-oifigigh. Úsáidimid roinnt próiseas uathoibrithe, ach i ngach cás, ní dhéantar an cinneadh uathoibrithe ach i dtaobh dámhachtainí rathúla. Ní bhfaighidh tú fógra uathoibrithe ach má d’éirigh leat le d’éileamh. Ciallaíonn seo, sa chás go dtugann ríomhchóras le fios go mb’fhéidir nach gcáileofar thú d’íocaíocht, seolfaidh an ríomhaire d’iarratas ar aghaidh chuig ceann dár n-oifigigh go ndéanfar é a sheiceáil agus mura n-éiríonn leat, is é an t-oifigeach sin a dhéanfaidh comhfhreagras leat, seachas an meaisín. Ar an mbealach seo, níl aon chás sa Roinn ina ndiúltóidh meaisín, nó ríomhchóras íocaíocht do chustaiméir. Anuas air sin, bíonn an ceart ag custaiméirí i gcónaí chun achomharc a dhéanamh in aghaidh cinneadh a rinne an Roinn. 10.5 An ceart i leith iniomparthacht sonraí (an ceart chun do shonraí a fháil ó rialaitheoir amháin agus iad a sheoladh chuig rialaitheoir eile) Tá an ceart ag ábhair shonraí (custaiméirí) a sonraí a iarraidh ó rialaitheoir amháin, chun gur féidir iad a thabhairt do rialaitheoir eile (cuideachta). Baineann an ceart seo le heagraíochtaí ar nós fóntas, institiúidí airgeadais nó fiú láithreáin mheán sóisialta a bhfuil conradh agat leo agus sa chás gur mian leat a lorg chun soláthraí a athrú nó b’fhéidir margadh níos fearr a fháil. De réir an chirt seo, féadfaidh tú do shonraí pearsanta a fháil i bhformáid struchtúrach, a úsáidtear go coitianta, atá inléite ag meaisín le hiad a aistriú chuig eagraíocht eile. Sa chás go n-éilíonn aon chustaiméir a gcearta faoi iniomparthacht sonraí, b’fhéidir go mbeidh ar an Roinn a iarraidh cén sonraí ar leith a theastaíonn, ach déanfaimid iarracht chun an fhaisnéis a sholáthar a thapúla agus is féidir. 10.6 An ceart go gcuirfear ar an eolas thú ar Shárú ar Shonraí Mar chustaiméir, tá dualgas orainn, chomh maith, thú a chur ar an eolas nuair a d’fhéadfadh gur cailleadh, gur milleadh nó gur tugadh do shonraí pearsanta do dhuine nó d’eagraíocht nár cheart dóibh iad a fháil. Tá réimse bearta slándála i bhfeidhm ag an Roinn Gnóthaí Fostaíochta agus Coimirce Sóisialaí (RGFCS) chun do shonraí pearsanta a chosaint. B’fhíor-annamh go ndéanfaí sonraí pearsanta duine a sheoladh de thimpiste chuig duine eile nó go gcaillfí nó go ngoidfí aon chinn de shonraí pearsanta a bhí á stóráil ag an RGFCS. Sa chás mídhóchúil go dtarlaíonn sárú ar shonraí, áfach, scríobhfaidh an Roinn chugat lena dheimhniú cad a tharla agus cén cinn de do shonraí a ndearnadh difear dóibh. Cuirfimid oifig an Choimisinéara Cosanta Sonraí ar an eolas, chomh maith, sa chás gur mian leo tabhairt faoi imscrúdú. However, in the unlikely event that a data breach happens, the Department will write out to you to confirm what happened and which of your data was affected. We will also inform the Office of the Data Protection Commissioner, should they wish to undertake an investigation. 10.7 Conas teagmháil a dhéanamh linn? Má bhíonn ceisteanna agat faoin mbeartas seo, déan teagmháil, le do thoil, leis an Oifigeach Cosanta Sonraí (an OCS). Féadtar teagmháil a dhéanamh leis an OCS don Roinn i gcónaí ag DPO@welfare.ie Oibríonn an Roinn go dian dícheallach chun d’fhreagracht sonraí a láimhseáil agus caithimid lenár bhfreagrachtaí um chosaint sonraí mar ábhar tromchúiseach. Má tá tú míshásta leis an mbealach a dhéanaimid é seo, déan teagmháil, le do thoil, leis an OCS. Tá súil againn go mbeidh an OCS in ann dul i ngleic le haon bhuarthaí a bhíonn agat. Tá an ceart agat, áfach, chomh maith, gearán a dhéanamh lehOifig an Choimisiúin Chosanta Sonraí (OCCS). Is féidir teagmháil a dhéanamh leis an OCCStrí na sonraí seo a leanas a úsáid:- Sa phost: Canal House, Station Road, Portarlington, R32 AP23, Co. Laois. Ar ríomhphost: info@dataprotection.ie Ar an nguthán: 0761 104 800 nó uimhir íosghlao 1890 252 231 10.8 Conas is féidir leat do chearta a fheidhmiú? Caithfimid ligean duit na cearta a dtugtar cuntas orthu thuas a úsáid. Is féidir leat a iarraidh a dhéanamh faoi aon chinn de na cearta seo trí theagmháil a dhéanamh le OCS na Roinne ag an seoladh ar leathanach 1 den fhoirm seo. B’fhéidir go mbeidh orainn d’aitheantas a dheimhniú ar dtús, mar gheall nach féidir linn do shonraí pearsanta a thabhairt do dhaoine eile. A luaithe a dheimhníomar d’aitheantas, lorgóimid chun an fhaisnéis a fháil a d’iarr tú a luaithe agus is féidir. Táimid tiomanta, áfach, chun tú a choimeád ar an eolas ar ár ndul chun cinn laistigh de30 lá. Ar iarrataí casta nó sa chás go ndéantar líon mór iarrataí, féadfaimid an t-am a ghlacann sé orainn freagairt ort a shíneadh le 60 lá breise (dhá mhí), ach caithfimid insint duit go bhfuil seo á dhéanamh laistigh de na chéad 30 lá, anuas ar an gcúis atá leis an moill. Mura bhfuilimid chun freagairt ar d’iarraidh, caithfimid seo a insint duit laistigh de 30 lá. Caithfimid a mheabhrú duit go bhfuil de rogha agat gearán a dhéanamh leis an OCCS. Má dhéanann tú iarraidh leictreonach, caithfimid freagairt ort go leictreonach, mura fearr leat a mhalairt. Caithfidh aon rud a dhéanaimid mar fhreagairt ar d’iarraidh agus aon fhaisnéis a thugaimid duit a bheith saor in aisce. Má dhéanann tú iarrataí iomarcacha (e.g. má dhéanann tú an ceann céanna arís agus arís eile) nó mura bhfuil aon bhonn le d’iarrataí i dtaobh fíricí de, féadfaimid táille a ghearradh ort nó a dhiúltú gníomhú ina leith. Ní ghearrfaimid táille ort sa chás go ndearna tú botún, ar nós na láithreach míchirte, ach ní ghníomhóimid ar d’iarraidh. Mar gheall ar mhéid na heagraíochta, féadfaimid iarraidh ort chun d’iarraidh a shoiléiriú. Is féidir leat cabhrú linn d’iarraidh a chomhlíonadh faoi shonraí pearsanta trí bheith chomh sonrach agus is féidir, go háirithe faoi do dhéileáil nó teagmháil linn. Más mian leat aon fhaisnéis bhreise ar conas a oibríonn limistéar den Roinn agus an méid a theastaíonn chun cinneadh a dhéanamh faoi éileamh nó seirbhís, tabhair cuairt, le do thoil, ar ár láithreán gréasáin ag www.welfare.ie. Áirítear le faisnéis ar gach ceann dár scéimeanna treoirlínte oibríochtúla.