IEA Privacy Notice – Irish Economic Association

IEA Privacy Notice
(Version 1.1 – dated 4th Nov 2022)

[PDF here]

Background

The Irish Economic Association understands that your privacy is important to you and that you care about how your personal data is used. In this Privacy Notice we therefore describe how we collect, use and store your personal data. We advise you to carefully read this Privacy Notice.

Please rest assured that in processing your personal data we always try to act in accordance with the provisions of the General Data Protection Regulation (EU Regulation 2016/679 or “GDPR”) and any other applicable laws or regulations on the protection of personal data.

1. Information About Us

The Irish Economic Association is a national scientific body for economists in Ireland. The objective of the Association is to contribute to the development and application of economics in Ireland.

It is a Company Limited by Guarantee with a registered address at The Economic and Social Research Institute, Whitaker Square, Sir John Rogerson’s Quay, Dublin 2, Ireland. In the framework of this Privacy Notice, we shall act as the data controller. If you would like to contact us in relation to this Privacy Notice, you can do so by using the following contact details:

Data protection lead: IEA Secretary
Email address: info@iea.ie

2. What Does This Notice Cover?

This Privacy Notice explains how we use your personal data: how it is collected, how it is held, and how it is processed. It also explains your rights in relation to the processing of your personal data. The Privacy Notice is applicable to all data processing activities carried out by the Irish Economic Association (IEA), including the data processing activities carried out through our website or in the framework of our service provision. We process personal data for the management of our events, for distribution of communications, and for submissions to our various funding calls. Specifically, personal data are collected in relation to:

IEA Annual Conference submissions
IEA Research Proposals submissions
IEA Travel Grant submissions
Nominations for IEA Board
Communications to IEA members
IEA Membership list

By continuing to use our website and services, you confirm to have read and understood the content of this Privacy Notice.

3. What is Personal Data?

Personal data is defined by the GDPR as any information relating to an identified or identifiable natural person who can be directly or indirectly identified in particular by reference to an identifier. Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.

When you use our website or apply to our events/activities, we may collect some or all of the following personal data (this may vary according to your relationship with us):

Title
Name and surname
Nationality
Year of birth
Gender
(Work) Address
Email address
Telephone number
Business name
Job title
Profession
Payment information
Information about your research preferences and interests.

For “in-person” event organisation, we may collect the following:

Photos of people taken at the event (provided – where necessary – you have given your consent to such photos being taken and published).

These personal data are processed in order to allow us to provide you with the requested services (e.g. registration for one of our events or application to our funding calls), to be able to handle your requests (e.g. to answer queries addressed to us via the IEA email address) or because it is in our legitimate business interest to do so. Hence, your data are processed on the legal basis existing in the necessity to be able to perform a contract we have (or will engage in) with you, on the basis of your consent or on the basis of our overriding legitimate business interest.

Some of the abovementioned information is mandatory to provide (which will always be indicated appropriately). If you fail to provide us with such mandatory information, we will not be able to provide you with the requested services/supports.

4. How Do You Use My Personal Data?

Your personal data may be used for the following purposes:

Providing and managing the services/supports we provide to you, such as membership, funding call submission, and event registration.
Communicating with you. This may include responding to emails.
Supplying you with information that you have opted-in to (you may unsubscribe or opt-out at any time)
Evaluating, managing and updating our website.

We have taken all reasonable and suitable technical and organisational measures in order to protect your personal data as well as possible against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data. Your personal information will also be treated as strictly confidential at all times.

5. How Long Will You Keep My Personal Data?

We will not keep your personal data for any longer than is necessary for the purpose for which it has been collected or for as long as legally required. The length of time we keep your data for may vary depending on the activity it relates to.

In the event that no legal obligation to store your personal data exists, your personal data shall be erased on a routine basis once the purpose for which the personal data is collected has been achieved.

Most of your personal information will be retained by us for a period of maximum 10 years following the end of our membership relationship with you.

We may store your personal data for longer if you have given us your consent to do so or where such storage is necessary for the establishment, exercise or defense of legal claims. In this last instance, certain personal data may be used for evidence purposes.

6. How and Where Do You Store or Transfer My Personal Data?

We will in principle only store or transfer your personal data within the European Economic Area (the “EEA”). The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein. This means that your personal data will be fully protected under the GDPR or to equivalent standards by law.

Should it nevertheless be necessary to transfer your personal data outside of the EEA, we will take measures to ensure that your personal information is protected at all times (for example, signed standard contractual clauses).

7. Do You Share My Personal Data?

We may sometimes contract with selected third parties to supply services/supports to you on our behalf e.g. conference submission. In some cases, those third parties may require access to some or all of your personal data that we hold.

If any of your personal data is required by a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law. Such third party service providers shall in principle only process your personal information as data processors acting on our behalf and we will take appropriate measures to ensure that an contract has been signed with them so that they respect similar privacy standards as the ones set out in this Privacy Notice.

In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.

Personal data that is voluntarily disclosed on any (third party) bulletin boards or in chat areas accessible to other users of our website could potentially be collected by such users and/or disclosed to third parties. We cannot accept any liability is for such collection and disclosure.

8. What Are Your Rights in relation to Your Personal Data?

Under the GDPR, you have the following rights, which we will always work to uphold in as far as the conditions for the exercise of such rights are fulfilled:

(a) The right to be informed about our collection and use of your personal data.

(b) The right to access the personal data we hold about you.

(d) The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data that we have.

(e) The right to restrict (i.e. prevent) the processing of your personal data.

(f) The right to object to us using your personal data for a particular purpose or purposes.

(g) The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business.

To exercise any of these rights, please address your request to us in writing, using the email address shown in Part 9.

There is normally no charge for such request. However, if your request is manifestly unfounded or excessive (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.

In order to verify your identity, we ask you to enclose a copy of the front of your identity card with each request. After verifying your identity, we will destroy such copy. If your identity can correctly be verified, we will assess your request to see whether all conditions have been fulfilled and whether we can indeed grant your request.

In any case, we will respond to your request within one month of receiving it. Normally, we aim to provide a complete response within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.

If you have any cause for complaint about our use of your personal data, you also have the right to lodge a complaint with the Irish Data Protection Commission https://www.dataprotection.ie/

9. How Can You Contact Us?

To contact us about anything to do with your personal data and data protection, including to make a subject access request, please contact info@iea.ie

10. Changes to this Privacy Notice

We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection. The latest version of this Privacy Notice will be published on our websites.

IEA Privacy Notice (Version 1.1 – dated 4th Nov 2022)