Privacy
Policy

Document Title: Privacy Notice
Version: V.1
Owner: GDPR Team
Approved by: GDPR Team
Next Review: December 2026
Date: December 2023

Organization: Ionad UISCE Teo, T/A Coláiste UISCE


1. General

Ionad UISCE Teoranta, T/A Coláiste UISCE, is committed to protecting all personal and special categories of data held on you. For data protection purposes, Ionad UISCE Teoranta T/A Coláiste UISCE is the controller responsible for your personal data.

Coláiste UISCE wants you, the data subject, to understand how your personal data is collected, used, stored, and shared, as well as what rights you can invoke to protect your privacy. Please read this Privacy Notice carefully.

The most recent version of this document is available on the Coláiste UISCE website: https://uisce.ie


1.1 Coláiste UISCE Information

Coláiste UISCE is an Irish college and adventure centre offering Gaeltacht Irish language courses combined with adventure sports, activity tours, and team-building courses. Services are provided at a purpose-built centre, and activities take place at nearby locations.

Courses are also offered at a second site in Aughleam, including food and accommodation. For further information, visit the UISCE website: https://uisce.ie


1.2 Legislation

All personal data processed by Coláiste UISCE is in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.


1.3 Queries and Complaints

If you are unhappy with how Coláiste UISCE handles your personal data, or if you want further information about its use, please contact:

Data Protection Officer
Coláiste UISCE
Cuan Eilí, O.P. an Chlochair
Béal an Átha, Co. Mhaigh Eo
Email: eolas@uisce.ie

You may also lodge a complaint with the Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Tel: +353 (0)761 104 800 / +353 (0)57 868 4800
Email: info@dataprotection.ie


1.4 Breaches

Coláiste UISCE will take appropriate technical and organisational measures to safeguard your personal data. In the unlikely event of a data breach, you will be contacted in line with legal obligations.


2. How Does Coláiste UISCE Collect Information?

Coláiste UISCE collects personal data to enable the provision of its services. Methods include:

  • Directly from you when registering for a course

  • During employment or work applications

  • Through cookies on the Coláiste UISCE website

  • From schools or third parties, e.g., scholarships

  • At events, online, and social media competitions

  • CCTV surveillance on premises

Please ensure the personal data you provide is accurate. If your information is incorrect or incomplete, contact Coláiste UISCE to update it.


3. What Does Coláiste UISCE Use Information For?

3.1 Process, Purpose, and Lawful Basis

Coláiste UISCE uses personal data to fulfil its obligations and provide services. Examples include:

  • Course Bookings & Enrolments: To enroll students and organize courses (necessary for contract performance)

  • Attendance & Wellbeing: Monitoring students during courses (necessary for contract performance)

  • Disciplinary & Incident Reporting: Maintaining records for student safety (necessary for contract performance)

  • Training Records: Assessing course performance (contractual obligation)

  • Accidents & Incidents: Compliance with Safety, Health, and Welfare Act 2005 (legal obligation)

  • Recruitment & Pre-Recruitment: Processing applications and Garda vetting (legal and contractual obligations)

  • Payroll & Pension: Administering payments and entitlements (contractual/legal obligation)

  • Medical & Performance Data: Managing absences, sick pay, and fitness to work (contractual obligation)

  • Regulatory Compliance: Compliance with financial and employment regulations (legal obligation)

  • Third Party Data Sharing: Working with service providers (contractual obligation)

  • CCTV & Cookies: Ensuring safety and enhancing website experience (legitimate interest)

Coláiste UISCE only processes personal data where necessary and lawful, based on consent, contract, legal obligations, or legitimate interest.


4. Who Does Coláiste UISCE Share Information With?

Coláiste UISCE may share personal data with third parties, ensuring appropriate safeguards are in place. Types of third parties include:

  • Service providers for audits, research, and consultancy

  • Governing bodies such as Roinn na Gaeltachta, Department of Education, Irish Sailing Association, and CONCOS

  • Government departments, agencies, and authorities including TUSLA and Gardaí

Coláiste UISCE does not sell your personal data and ensures it is protected during any sharing.


5. What Type of Information is Collected?

Students

  • Name, date of birth, contact details, education, CCTV footage

  • Medical and health information

  • Parents’ contact information

  • Specific educational, emotional, or religious needs

  • Incident, accident, and behavioural records

Employees

  • Personal and contact details, family, financial, tax, and pension information

  • Employee ID, CCTV footage, training records, grievance and disciplinary records

  • Medical and criminal data

Other Stakeholders

  • Contact details, images, bank/payment information


6. How Long Does Coláiste UISCE Retain Information?

Retention periods depend on:

  1. Duration required for the task

  2. Legal requirements

  3. Pending legal actions

For a copy of the Retention Policy, contact the DPO: eolas@uisce.ie


7. What Are Your Rights?

As a data subject, you may exercise the following rights:

7.1 Where to Send Requests

Contact the DPO with details of your request and provide identification for verification.

7.2 Timeframe

Requests are answered within 30 days, with a possible extension of two months if necessary.

7.3 Right of Access

You can request details of personal data held, its purpose, and how it is processed.

7.4 Right to Rectification

Request corrections to inaccurate or incomplete data.

7.5 Right to Be Forgotten

Request erasure of personal data when no longer necessary, consent is withdrawn, or processing is unlawful, subject to legal obligations.

7.6 Right to Restriction

Restrict processing when data is inaccurate, unlawful, or no longer needed but required for legal claims.

7.7 Right to Data Portability

Receive your data in a structured, machine-readable format and transfer it to another controller.

7.8 Right to Object

Object to processing based on public or legitimate interest. Coláiste UISCE will stop processing unless required for legal reasons.