Who are we?

The Higher Education Authority (An tÚdarás um Ard-Oideachas) is a statutory body created by the Higher Education Act  1971 which has a statutory responsibility, at central government level, for the effective governance and regulation of higher education institutions and the higher education system.

The HEA leads the strategic development of the Irish higher education and research system with the aim of creating a coherent system of diverse institutions with distinct missions, which is responsive to the social, cultural and economic development of Ireland and its people and supports the achievement of national objectives. The HEA is accountable to the Minister for Further and Higher Education, Research, Innovation and Science.

Nature and scope of this notice

Data Protection Law includes the General Data Protection Regulation EU regulation 679/2016 (GDPR) and the Data Protection Act 2018 (DPA 2018), which transposed the GDPR into Irish Law, and the E-Privacy Directive (S.I. 336/2011) and they each apply to the processing of your personal data.

The HEA is a data controller pursuant to these laws and as such we are required to provide you as a data subject with certain information to ensure you are aware that we are taking due care when processing your personal data, and are doing so in a compliant manner. This Notice covers data processed on this website, and by the HEA in carrying out its functions.  It does not cover how your data is processed by a higher education institute (HEI) operating under the aegis of the HEA Act 2022. For more specific information please refer to the individual HEI.

Why do we process your personal data?

The HEA was established in the Higher Education Act, 1971 and this legislation, along with our updated Higher Education Authority Act 2022, provide us with a number of general functions such as:

(a) furthering the development of higher education,

(b) assisting in the co-ordination of State investment in higher education and preparing proposals for such investment,

(c) promoting an appreciation of the value of higher education and research,

(d) promoting the attainment of equality of opportunity in higher education,

(e) promoting the democratisation of the structure of higher education.

In order to satisfy these functions the HEA engages in a number of activities, all with the aim of further higher education in Ireland.

Funding

The provision of funding to HEIs in a strategic manner which best serves the current and future needs of the state as well as funding at an individual level for students such as those eligible for free fees, the Student Assistance Fund, or the Fund for Students with Disabilities, is one of the core legislative functions of the HEA.

In order to provide the correct levels of funding to the HEIs, it is important the HEA receives particular information.  For “core funding” the HEA relies, in the main, on the Student Record System (SRS).  The information gathered in this system gives the HEA the ability to determine the exact number and nature of study of students in each HEI, see below for more information. A Data Protection Impact Assessment has been carried out on the SRS.

For other funding the HEA relies on separate returns from the HEIs.  These may be for the Fund for Students with Disabilities (FSD) funding for example, where the level of funding depends on costs of supports provided by individual HEIs to students with disabilities.  The HEA is required to gather certain information regarding this fund to ensure that the correct level of funding is given to the HEI. A Data Protection Impact Assessment has been carried out on the Fund for Students with Disabilities.

Student Record System

The Student Record System (SRS) is the main system which is used by the HEA to gather information from the HEIs regarding students. The data held within the SRS is used by the HEA to carry out many of its statutory functions, such as assisting in the co-ordination of State investment in higher education and informing key decision making. Due to the number of students in third level education in Ireland it is important that there is a centralised and standardised system for collecting information. The information is uploaded by the HEIs to the system where it can then be analysed by the statistics team. Some aggregated and disaggregated data is then shared internally to allow the HEA to carry out its statutory functions.

For example, some disaggregated student data is shared with the System Funding team as part of the process of allocating the annual core grant. Disaggregated student data is required to calculate funding using the RGAM model and to reconcile student numbers for funding purposes.  Some disaggregated socio-economic data is shared with the Access Policy section to allow for monitoring of the Access Plan targets. Aggregated data is shared with many sections in the HEA, including the above sections and also the International Section, Capital Programmes and Skills & Engagement. For the purposes of SRS data, the difference between aggregated and disaggregated data is the number of results per analysis result.

For example, aggregated data may be a result of combining all new entrant, female students in the school of Arts and Humanities.  This will result in a large number of results, in the thousands, which are anonymous so can be reported on and published.  Disaggregated data may be a result of combining more specific course level data with other specific attributes, such as male students studying a particular course (with a low number of registered students) in a particular HEI who receive a grant. This may give 4 results, which is regarded as disaggregated data.  This level data is not published by the HEA but may be shared internally for the purposes listed above.

The statistics team carry out research and analysis on the information which is gathered in the SRS in order to provide information and reports.  These are available on the website. These reports are used to display the state of higher education in Ireland and are invaluable for policy analysis to decision makers but they do not contain any personal data. They are also very useful to members of the public as they may be used to decide which HEI to attend or which career to pursue.

Surveys

There are a number of surveys carried out by the HEA such as the Graduate Outcome Survey (GOS), the Equal Access Survey (EAS) and surveys carried out in conjunction with out partners such as Student Survey.

The GOS is vital to the HEA as it enables the analysis of the success factors for academic courses.  The EAS informs the HEA on the level of funding which HEIs require for certain students, such as those with disabilities, on an institution level as opposed to on a student level.

For surveys which are carried out with our partners, we do not receive any personal data but instead we receive aggregated data which cannot be used to identify someone. For the categories of personal data collected in this process, please see Appendix 1.

International Programmes

The HEA assists in the running and management of international programmes such as Erasmus and Government of Ireland Scholarships.

For Erasmus programmes the HEA has access to an online portal which contains data that has been uploaded by HEIs concerning relevant individuals.  This tool was introduced by the EU in the Erasmus+ programme as the funding body for Erasmus activities.

For Government of Ireland Scholarships and other programmes which require and application and assessment, the data is uploaded to and stored in an online system which allows for the assessment of the application.   This is to ensure that the funding is properly administered to applicants who are successful in the process.

HEA website

The majority of data collected by the website concerns technical details in connection with visits to this website, these may be logged on the hea.ie server for analytical purposes (e.g. Computer IP number). The HEA will not disclose such technical information in respect of individual website visitors to any third party unless obliged to disclose such information by a rule of law. The technical information will be used only for statistical and other administrative purposes.

The technical details logged are confined to the following items:

  • The IP address of the visitor’s web server (while this may be used to identify someone, it is not used for this purpose by the HEA)
  • The type of web browser used by the website visitor.
  • The top-level domain name used (for example .ie., .com, .org, .net)
  • clickstream data which shows the traffic of visitors around this web site (for example pages accessed and documents downloaded)
  • The previous website address from which the visitor reached us, including any search terms used

For more information, please see the Cookie policy.

What do we process?

We process the information that is shared with us by the relevant HEI for the various activities which have been outlined in brief above.

While we may process some special categories of personal data in order to provide accurate funding, we endeavour to ensure that this data is not used to identify anyone. In most cases the data is anonymised by requesting the data in aggregate form to ensure that no individual can be identified, however, this is not possible in all circumstances due to the nature of the data collected.

It may not be possible when the data relates to a small number of individuals who may be identified based on their particular circumstances Strict controls are in place to ensure that this data is not further processed for any reasons, and access to the data is strictly limited.  For more information please see Appendix 1.

Who do we share your data for?

We are mandated to share certain information with Government Departments and other statutory bodies.  These include:

Student Universal Support Ireland

There is a data sharing agreement in being between the HEA and the City of Dublin Education and Training Board (CDETB), who operate the Student Support Scheme in accordance with the Student Support Act 2011. The SUSI data sharing agreement has its lawful basis under section 28 of the SSA 2011. Data controllers may process personal data for the relevant purposes of that Act.  The HEA and SUSI are bodies listed in Schedule 2 of the SSA 2011 and as such may process and share the required data.  Only data which is necessary and proportional has been shared.

Central Statistics Office

Data is shared with the CSO pursuant to the Statistics Act 1993 and a memorandum of understanding is available on request.

Department of Further and Higher Education, Research, Innovation and Science, and the Department of Education and Skills & Relevant Agencies (SOLAS)

We are required to share some personal data with DFHERIS and DoE, as necessary and proportionate. As an agency of the Department of Education and Skills we are requested to share some data with SOLAS to allow for transitions rates analysis. A data sharing agreement between the HEA and SOLAS is now in effect and sets out the data to be shared and the conditions under which the data will be shared.

Do we Transfer your Data Outside the EEA?

In general, we do not transfer any personal data outside the EEA.  If we do transfer data outside the EEA, we will ensure that there is an appropriate mechanism for doing so that complies with all relevant legislation and will also ensure that your data receives the same level of protection as it is afforded within the EEA.

How long do we Store your Data for?

The HEA will store your data for no longer than is necessary for the purposes of the processing activity.  Different processing activities require different retention periods.  For example, SRS data is maintained for 40 years after it is first received by the HEA, this is to enable the HEA to carry out longitudinal studies for which the data is necessary.  For other processes, such as the FSD, once the data has been verified, efforts are made to anonymise the data such as removing unique identifiers and aggregating the data further.

However, it may be possible to reidentify the data based on the particular circumstances of the data subjects concerned.  For example, some of the data may relate to a small group of individuals who may, by virtue of their circumstances, be identifiable.  Access to this data is strictly controlled and additional security has been put in place.

Your Rights as a Data Subject

You have a number of rights under the Data Protection Law. These rights can be applied by making the appropriate request to the HEA by contacting us on dataprotection@hea.ie. Forms are available on the data protection pages on the HEA website.

In processing a Data Subject request, the HEA will:

  • Check whether we or any of our processors hold your personal data
  • Check the validity of the request by confirming your identity if we have reasonable doubts as to your identity,
  • Decide if the request is excessive or manifestly unfounded or if the request will be refused based on restrictions and guidance
  • Determine if a charge may be applied if the request is deemed to be unjustified or excessive
  • Determine if additional information or clarification is required from you in order to process the request
  • Determine if the request can be answered within one month or if an extension is required
  • Determine if the request complies with the specific requirements of the Data Protection Law
  • Determine if any exemptions are to be applied to the request

While we will always endeavour to fully comply with access requests, in certain circumstances we may need to decline your request (where we are legally permitted to do so).. Such a refusal will be explained to you in writing. Please note that your rights are not absolute.

Right of Access

You have a right to request access to a copy of your personal data. In addition, other information relating to the processing, sharing and retention of your personal data must also be provided to you when processing a Subject Access Request.

Right to Rectification

You have a right to have your personal data rectified if it is inaccurate or incomplete. If this personal data has been shared with third parties, the HEA will notify such third parties about the rectification request from you unless this is impossible or involves disproportionate effort. Where it is deemed reasonable for the HEA not to comply with a request for rectification, this decision will be explained to you in writing. Where the error relates to data submitted to the HEA by another data controller, the HEA will refer the matter to the relevant data controller for appropriate action.

Right to Erasure

You have a right to erasure, also known as the right to be forgotten, of your personal data where one of the following grounds apply:

  • The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
  • You withdraw your consent and there is no other legal basis for the processing
  • You object to the processing pursuant to article 21(1) of the GDPR
  • The personal data have been unlawfully processed
  • The personal data have to be erased for compliance with a legal obligation
  • The personal data have been collected in relation to the offer of information society services of a child

A request for Erasure of personal data can be refused where processing is necessary:

  • For exercising the right to freedom of expression and information
  • For compliance with legal obligation or for the performance of a public interest task or exercise of official authority, which the HEA will be relying on in many cases
  • For Public health reasons
  • For archiving interests in the public interest, scientific, historical research or statistical purposes
  • For the exercise or defence of legal claims

Right to Restriction of Processing

You have a right to Restrict the Processing of your personal data where one of the following grounds apply:

  • Where you contest the accuracy of your personal data (processing should be restricted for a period enabling the HEA to verify the data’s accuracy)
  • Where the processing is unlawful, and you oppose erasure and requests restriction instead
  • Where the HEA no longer needs the personal data but you require the HEA to continue to process the personal data to exercise or defend a legal claim

When you exercise your right to restrict processing, the HEA will only continue to process the personal data if:

  • You consent
  • The processing is necessary for the exercise or defence of legal claims
  • The processing is necessary for the protection of the rights of other individuals or legal persons
  • The processing is necessary for Public Interest reasons under EU/Member State law, which the HEA will be relying on in many cases

The HEA will inform you before the processing restriction is lifted/enforced.

Right to Data Portability

You have a right to receive the personal data you have provided to the HEA in a structured, commonly used and machine-readable format. You have the right to have your personal data transmitted to another controller. The right applies to personal data you have provided to the HEA and to personal data generated by an individual’s activity but does not extend to data generated by the HEA. The right to Data Portability only applies if:

  • The processing is based on your consent or for the performance of a contract and
  • The processing is carried out by automated means

The right to Data Portability will not apply to processing necessary for the performance of a task carried out in the Public Interest, or in the exercise of official authority vested in the HEA. In addition, the right to Data Portability must not adversely affect the rights and freedoms of others. Data Portability does not automatically trigger the erasure of your personal data from the HEA systems/processes and does not affect the original retention period applying to the personal data.

Right to Object

You have a right to object to the processing of your personal data on the following grounds:

  • Direct marketing; where personal data are processed for direct marketing purposes, you have the right to object at any time to such processing; there are no grounds to refuse to comply with such a request. When you object to processing for direct marketing purposes, the personal data can no longer be processed for that purpose.
  • Processing based on public interest or legitimate interest grounds, including profiling.
  • Processing for scientific, historical research or statistical purposes (unless the processing is necessary for the performance of a public interest).

When you object to the processing of your personal data, the HEA will stop processing the personal data unless the HEA can demonstrate that there are compelling legitimate grounds for the processing which override your rights; the processing is necessary for the exercise or defence of legal claims or the personal data is processed for scientific, historical research or statistical purposes, the processing of which is necessary for the performance of a public interest/task.

Right to Object to Automated Decision-Making, Including Profiling

The HEA does not make any decisions based on automated processing.  Limited profiling is carried out by the statistics unit in order to ascertain the socio economic back ground of students attending higher level education.  This allows the HEA to achieve its legislative goals of ensuring the equality of attainment of opportunity in higher education.

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effect concerning you.

Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw consent at any time without suffering any adverse effects.  We only require your consent to gather certain data sets prior to accepting a place on a course, you can withdraw consent for this by emailing dataproteciton@hea.ie at any time.  Your HEI may request your consent to process your personal data, and to share that data with us.  If you wish to withdraw this consent please contact your HEI.

Making a Complaint with the DPC

The Data Protection Commission is the Supervisory Authority in Ireland.  If you are not happy with how we are processing your data or have any concerns with regards to this Privacy Notice you can contact the DPC.  There are a number of ways to contact the DPC: using an online form on their website; https://forms.dataprotection.ie/contact, phone; +353 (0)761 104 800 or +353 (0)57 868 4800, or by post;

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28

Appendix 1 – Categories of Personal Data

Data Processing activity Categories of personal data Lawful Basis Retention Periods
Student Record System (SRS) For a full list of the data sets being gathered please click here task carried out in the public interest or in the exercise of official authority vested in the HEA 40 years
Equal Access Survey (EAS) For a full list of the data sets being gathered please click here task carried out in the public interest or in the exercise of official authority vested in the HEA 40 years
Graduate Outcome Survey (GOS) For a full list of the data sets being gathered please click here task carried out in the public interest or in the exercise of official authority vested in the HEA 40 years
Fund for Students with Disabilities (FSD) Identifying data, educational information, health related data

 

 task carried out in the public interest or in the exercise of official authority vested in the HEA 7 years
Website analytics (for more information please see our cookies policy IP address Consent 2 years
Recruitment Identifying, contact, work and educational experience Legitimate interest of the HEA, task carried out in the public interest or in the exercise of official authority vested in the HEA 1 year for unsuccessful candidates.
General administration of tasks and duties of HEA, such as working with HEIs, dealing with queries Identifying, contact task carried out in the public interest or in the exercise of official authority vested in the HEA Once the data is no longer needed it is deleted

 

Further information

Relevant Legislation

  • Higher Education Act 2022
  • Universities Act 1997
  • Institute of Technologies Act 2006
  • Technological Universities Act 2018.

For further detailed privacy notices on the HEA’s programmes, please see the following links:

Cookies

This website, and associated websites, uses cookies in order to allow it to function as required and for analytical purposes.  You have been asked to provide your consent for the use of analytical cookies. For more information please see the Cookies policy.

 

 

Cé muid féin?

Is muidne an tÚdarás um Ard-Oideachas, comhlacht poiblí a cruthaíodh leis an Acht um Ard-Oideachas 1971 agus atá faoi fhreagracht an Aire Oideachais agus Scileanna.

Tá an ÚAO i gceannas ar fhorbairt straitéiseach chóras ardoideachais agus taighde na hÉireann agus é mar aidhm córas comhleanúnach institiúidí éagsúla a chruthú le misin ar leith, atá freagrach d’fhorbairt shóisialta, chultúrtha agus eacnamaíoch na hÉireann agus a muintir agus a thacaíonn le baint amach Cuspóirí Náisiúnta.

Tá freagracht reachtúil ag an ÚAO, ag leibhéal an Rialtais Láir, le haghaidh rialachas agus rialáil éifeachtach institiúidí ardoideachais agus an chórais ardoideachais.

Cineál agus scóip an Fhógra seo

Tá an fógra príobháideachais deartha chun eolas a thabhairt duit maidir le conas a phróiseálfaimid do chuid sonraí tríd an láithreán gréasáin an HEA.ie.;. Bhain sé freisin le gníomhaíochtaí próiseála an ÚAO maidir lena fheidhmeanna reachtúla a chomhlíonadh.

Cén fáth a bpróiseálfaimid do shonraí pearsanta?

Bunaíodh an ÚAO san Acht um Ard-Oideachas, 1971 le roinnt feidhmeanna ginearálta ar nós:

(a) forbairt ardoideachais a chur chun cinn,

(b) cuidiú le comhordú infheistíocht Stáit san ardoideachas agus tograí a ullmhú le haghaidh infheistíochta den sórt sin,

(c) tuiscint ar luach ardoideachais agus taighde a chur chun cinn,

(d) gnóthachtáil comhionannais deiseanna a chur chun cinn san ardoideachas,

(e) Daonlathú struchtúr an ardoideachais a chur chun cinn.

D’fhonn na feidhmeanna seo a shásamh, bíonn an ÚAO ag gabháil do roinnt gníomhaíochtaí, go léir le haidhm an ardoideachais a chur ar aghaidh in Éirinn.

Maoiniú

Maoiniú a sholáthar do IAO ar bhealach straitéiseach a fhreastalaíonn ar riachtanais reatha agus amach anseo an stáit chomh maith le maoiniú ar leibhéal aonair do mhic léinn amhail iad siúd atá incháilithe do tháillí saor in aisce. Tá an Ciste Cúnaimh do Mhic Léinn, nó an Ciste do Mhic Léinn faoi míchumais, ar cheann de na feidhmeanna lárnacha reachtacha an ÚAO.

D’fhonn na leibhéil chearta maoinithe a sholáthar don IAO, tá sé tábhachtach go bhfaigheann an ÚAO faisnéis ar leith. I gcás “príomh-mhaoiniú” bíonn an ÚAO ag brath, sa phríomhshruth, ar chóras taifead na mac léinn. Tugann an t-eolas a bhailítear sa chóras seo an cumas líon cruinn agus nádúr staidéir na mac léinn i ngach IAO a chinneadh, féach thíos le haghaidh tuilleadh eolais.

I gcás maoinithe eile, bíonn an ÚAO ag brath ar thuairisceáin ar leith ón IAO. D’fhéadfadh iad seo bheith don Chiste do Mhic Léinn faoi Mhíchumas (FSD) maoiniú mar shampla, i gcás ina mbraitheann leibhéal an mhaoinithe ar chostais tacaíochtaí a sholáthraíonn IAO aonair do mhic léinn faoi mhíchumas. Ceanglaítear ar an ÚAO faisnéis áirithe a bhailiú maidir leis an gciste seo lena chinntiú go dtugtar an leibhéal ceart maoinithe don IAO.

Córas Taifead na Mac Léinn

Is é Córas Taifead na Mac Léinn (SRS) an príomhchóras a úsáideann an ÚAO chun faisnéis a bhailiú ó na hInstitiúidí Ardoideachais maidir le mic léinn. Baintear úsáid as na sonraí a choinnítear laistigh den SRS ag an ÚAO chun go leor dá fheidhmeanna reachtúla a chur i gcrích mar chuidiú le comhordú infheistíochta stáit san ardoideachas agus príomhchinnteoireacht a chur ar an eolas. Mar gheall ar líon na mac léinn in oideachas tríú leibhéal in Éirinn tá sé tábhachtach go bhfuil córas láraithe agus caighdeánach ann chun faisnéis a bhailiú. Déantar an fhaisnéis a uaslódáil ag an IAO ar an gcóras nuair is féidir leis an bhFoireann Staidrimh anailís a dhéanamh air ansin. Roinntear roinnt sonraí comhiomlánaithe agus dí-chomhiomlánaithe ansin go hinmheánach chun ligean don ÚAO a fheidhmeanna reachtúla a dhéanamh.

Mar shampla, roinntear roinnt sonraí mac léinn dí-chomhiomlánaithe leis an bhfoireann maoinithe córais mar chuid den phróiseas chun an croí-deontas bliantúil a leithdháileadh. Tá gá le sonraí mac léinn dí-chomhiomlánaithe chun maoiniú a ríomh ag baint úsáide as an tsamhail RGAM agus chun uimhreacha mac léinn a réiteach chun críocha maoinithe. Roinntear roinnt sonraí socheacnamaíocha dí-chomhiomlánú leis an Rannóg Beartais Rochtana chun monatóireacht a dhéanamh ar spriocanna an Phlean Rochtana. Roinntear sonraí comhiomlánaithe le go leor rannóga sa ÚAO, lena n-áirítear na rannóga thuas agus an Rannóg Idirnáisiúnta, Cláir Chaipitil, Scileanna agus Printíseachtaí agus Oideachas Múinteoirí. Chun críocha sonraí SRS, is é an difríocht idir sonraí comhiomlánaithe agus dí-chomhiomlánú líon na dtorthaí in aghaidh na torthaí.

Mar shampla, d’fhéadfadh sonraí comhiomlánaithe a bheith mar thoradh ar gach iontrálaí nua, mic léinn baineann a chomhcheangal i Scoil na nEalaíon agus na nDaonnachtaí. Mar thoradh air seo beidh líon mór torthaí ann, sna mílte, atá gan ainm ionas gur féidir é a thuairisciú agus a fhoilsiú. D’fhéadfadh sonraí dí-chomhiomlánaithe a bheith mar thoradh ar shonraí leibhéal cúrsa níos sainiúla a chomhcheangal le tréithe sonracha eile, amhail mic léinn fireann atá ag déanamh staidéir ar chúrsa ar leith (le líon íseal mac léinn cláraithe) in IAO ar leith a fhaigheann deontas. D’fhéadfadh sé seo 4 thoradh a thabhairt, a mheastar mar shonraí dí-chomhbhailithe. Ní fhoilsíonn an ÚAO sonraí an leibhéal seo ach is féidir é a roinnt go hinmheánach chun na gcríoch atá liostaithe thuas a roinnt.

Déanann an fhoireann staitisticí taighde agus anailís ar an bhfaisnéis a bhailítear sa SRS chun faisnéis agus tuairiscí a sholáthar. Tá siad seo ar fáil ar an láithreán gréasáin. Úsáidtear na tuairiscí seo chun staid an ardoideachais in Éirinn a thaispeáint agus tá siad fíorluachmhar le haghaidh anailíse beartais do chinnteoirí ach ní bhíonn aon sonraí pearsanta iontu. Tá siad an-úsáideach freisin do mhuintir den phobal mar féadfar iad a úsáid chun cinneadh a dhéanamh maidir leis an IAO a bheith i láthair nó cé acu gairm a shaothrú.

Suirbhéanna

Tá roinnt suirbhéanna a rinne an ÚAO ar nós an Suirbhé ar Thorthaí Iarchéime (GOanna), an Suirbhé Rochtana Comhionann (EAS) agus suirbhéanna a rinneadh i gcomhar lenár gcomhpháirtithe mar an Suirbhé na hÉireann le haghaidh Rannpháirtíocht na Mac Léinn (ISSE) agus an Suirbhé Fostóirí Náisiúnta.

Tá an GOanna ríthábhachtach don ÚAO mar a chuireann sé ar chumas anailís a dhéanamh ar na fachtóirí ratha do chúrsaí acadúla. Cuireann an EAS in iúl don ÚAO ar an leibhéal maoinithe a éilíonn Institiúidí Ardoideachais do mhic léinn áirithe, ar nós iad siúd faoi mhíchumas, ar leibhéal institiúide seachas ar leibhéal na mac léinn.

Maidir le suirbhéanna a dhéantar lenár gcomhpháirtithe, ní fhaighimid aon sonraí pearsanta ach ina ionad sin faighimid sonraí comhiomlánaithe nach féidir a úsáid chun duine a aithint. Maidir leis na catagóirí sonraí pearsanta a bhailítear sa phróiseas seo, féach ar Aguisín 1.

Cláir Idirnáisiúnta

Cabhraíonn an ÚAO le cláir idirnáisiúnta a reáchtáil agus a bhainistiú ar nós Erasmus agus Scoláireachtaí Rialtais na hÉireann.

Maidir le cláir Erasmus tá rochtain ag an ÚAO ar thairseach ar líne ina bhfuil sonraí atá uaslódáilte ag IAO maidir le daoine ábhartha. Thug an AE an uirlis seo isteach sa chlár Erasmus + mar an comhlacht maoinithe le haghaidh gníomhaíochtaí Erasmus.

Maidir le Scoláireachtaí Rialtais na hÉireann agus cláir eile a éilíonn agus a chur i bhfeidhm agus a mheasúnú, déantar na sonraí a uaslódáil chuig agus a stóráiltear i gcóras ar líne a cheadaíonn measúnú a dhéanamh ar an iarratas. Tá sé seo lena chinntiú go bhfuil an maoiniú á riaradh go cuí d’iarratasóirí atá rathúil sa phróiseas.

Suíomh Gréasáin ÚAO

Baineann formhór na sonraí a bhailigh an láithreán gréasáin sonraí teicniúla i ndáil le cuairteanna ar an láithreán gréasáin seo, is féidir iad seo a logáil isteach ar an bhfreastalaí HEA.ie chun críocha anailíseacha (m.sh. uimhir IP an Ríomhaireachta). Ní nochtfaidh an ÚAO faisnéis theicniúil den sórt sin maidir le cuairteoirí ar an láithreán gréasáin aonair d’aon tríú páirtí mura n-oibleagáid air faisnéis den sórt sin a nochtadh trí riail dlí. Ní úsáidfear an fhaisnéis theicniúil ach amháin chun críocha staidrimh agus riaracháin eile.

Tá na sonraí teicniúla atá logáilte teoranta do na míreanna seo a leanas:

  • Seoladh IP an fhreastalaí gréasáin an chuairteora (cé go bhféadfar é seo a úsáid chun duine a aithint, ní úsáidtear é chun na críche sin ag an ÚAO)
  • An cineál brabhsálaí gréasáin a úsáideann cuairteoir an láithreáin ghréasáin.
  • an t-ainm fearainn ardleibhéil a úsáidtear (mar shampla .ie., .com, .org, .net)
  • Sonraí chonair chliceála a thaispeánann trácht na gcuairteoirí ar fud an tsuímh ghréasáin seo (mar shampla rochtain agus doiciméid a íoslódáil)
  • An seoladh láithreáin ghréasáin roimhe seo óna shroich an cuairteoir orainn, lena n-áirítear aon téarmaí cuardaigh a úsáidtear

Baineann na fianáin a bhailítear le Google Analytics, hailtirí (is é sin an córas grafaic faisnéise a úsáidtear) agus tá fianán toilithe ann. Mainneoidh na deireanach an Google Analytics á mhúchadh. Le haghaidh tuilleadh eolais, féach an beartas fianán.

Cad a Phróiseálaimid?

Próiseálaimid an fhaisnéis atá roinnte linn ag an HEI ábhartha do na gníomhaíochtaí éagsúla atá leagtha amach go hachomair thuas.

Cé gur féidir linn roinnt catagóirí speisialta sonraí pearsanta a phróiseáil chun maoiniú cruinn a sholáthar, déanaimid ár ndícheall a chinntiú nach n-úsáidtear na sonraí seo chun duine ar bith a aithint. I bhformhór na gcásanna tá na sonraí gan ainm, trí na sonraí a iarraidh i bhfoirm chomhiomlán lena chinntiú nach féidir aon duine a aithint, áfach, ní féidir é seo a dhéanamh i ngach cás mar gheall ar nádúr na sonraí a bhailítear.

B’fhéidir nach mbeidh sé indéanta nuair a bhaineann na sonraí le líon beag daoine aonair a d’fhéadfaí a aithint bunaithe ar a gcúinsí áirithe go bhfuil rialuithe dochta i bhfeidhm chun a chinntiú nach ndéantar na sonraí seo a phróiseáil ar chúis ar bith, agus go bhfuil rochtain ar na sonraí teoranta go docht . Le haghaidh tuilleadh eolais féach le do thoil Féach Aguisín 1.

Cé leis a roinnimid do chuid sonraí?

Táimid sainordaithe chun faisnéis áirithe a roinnt le Ranna Rialtais agus le comhlachtaí reachtúla eile. Orthu seo tá:

Tacaíocht Chomhchoiteann do Mhic Léinn in Éirinn

Tá comhaontú comhroinnte sonraí ann idir an ÚAO agus Bord Oideachais agus Oiliúna Chathair Bhaile Átha Cliath (BOOCBÁC), a oibríonn an Scéim Tacaíochta do Mhic Léinn de réir an Achta um Thacaíocht do Mhic Léinn 2011. Tá a bhonn dleathach ag comhaontú comhroinnte sonraí SUSI faoi alt 28 de SSA 2011. Féadfaidh rialaitheoirí sonraí, sonraí pearsanta a phróiseáil chun críocha ábhartha an Achta sin. Is iad na ÚAO agus SUSI atá liostaithe i Sceideal 2 den SSA 2011 agus mar sin d’fhéadfadh a phróiseáil agus a roinnt na sonraí riachtanacha. Ní comhroinntear ach sonraí atá riachtanach agus comhréireach.

An Phríomh-Oifig Staidrimh

Roinntear sonraí leis an bPríomh-Oifig Staidrimh de bhun an Achta um Staidreamh 1993 agus tá Meabhrán Tuisceana ar fáil ar iarratas.

An Roinn Oideachais agus Scileanna & Gníomhaireachtaí Ábhartha (SOLAS)

Mar ghníomhaireacht de chuid na Roinne Oideachais agus Scileanna Iarrtar orainn roinnt sonraí a roinnt le SOLAS chun anailís rátaí aistrithe a cheadú. Tá comhaontú comhroinnte sonraí idir an ÚAO agus SOLAS i bhfeidhm anois agus leagann sé amach na sonraí atá le comhroinnte agus na coinníollacha faoina roinnfear na sonraí.

An aistrímid do chuid sonraí lasmuigh den LEE?

Go ginearálta, ní aistrímid aon sonraí pearsanta lasmuigh den LEE. Má dhéanaimid sonraí a aistriú lasmuigh den LEE, cinnteoimid go bhfuil meicníocht chuí ann chun é sin a dhéanamh a chomhlíonann an reachtaíocht ábhartha go léir agus cinnteoidh sé go bhfaighidh do shonraí an leibhéal céanna cosanta mar go dtabharfar é laistigh den LEE.

Cá fhad a dhéanaimid do shonraí a stóráil?

Déanfaidh an ÚAO do chuid sonraí a stóráil ar feadh tréimhse nach faide ná mar is gá chun críocha na gníomhaíochta próiseála. Éilíonn gníomhaíochtaí próiseála éagsúla tréimhsí coinneála éagsúla. Mar shampla, coinnítear sonraí SRS ar feadh 40 bliain tar éis dó a bheith faighte ag an ÚAO den chéad uair, tá sé seo le cur ar chumas an ÚAO staidéir fhadtéarmacha a dhéanamh a bhfuil na sonraí is gá. I gcás próisis eile, amhail an FSD, nuair a bheidh na sonraí fíoraithe, déantar iarrachtaí chun na sonraí a aithint amhail aitheantóirí uathúla a bhaint agus na sonraí a chomhbhailiú.

Mar sin féin, d’fhéadfadh sé a bheith indéanta na sonraí atá bunaithe ar chúinsí áirithe na n-ábhar sonraí lena mbaineann a athrá. Mar shampla, d’fhéadfadh cuid de na sonraí a bheith bainteach le grúpa beag daoine aonair a d’fhéadfadh, de bhua a gcúinsí, a bheith inaitheanta. Tá rochtain ar na sonraí seo rialaithe go docht agus tá slándáil bhreise curtha i bhfeidhm.

Do chearta mar ábhar sonraí

Tá roinnt ceart agat faoin dlí cosanta sonraí. Is féidir na cearta seo a chur i bhfeidhm tríd an iarratas cuí a dhéanamh ar an ÚAO trí theagmháil a dhéanamh linn ar dataprotection@hea.ie. Tá foirmeacha ar fáil ar na leathanaigh um chosaint sonraí ar shuíomh gréasáin an ÚAO – www.hea.ie

Agus iarratas ar an ábhar sonraí á bpróiseáil, déanfaidh an ÚAO:

  • A sheiceáil an bhfuil do chuid sonraí pearsanta nó aon cheann dár bpróiseálaithe againn
  • Bailíocht na hiarrata a sheiceáil trí do chéannacht a dheimhniú, d’fhéadfadh bheith i gceist anseo, go n-iarrfaimid ar Aitheantas grianghraif
  • A chinneadh a dhéanamh an bhfuil an t-iarratas iomarcach nó an bhfuil sé de bhunús leis an iarraidh nó má dhéanfar an t-iarratas a dhiúltú bunaithe ar shrianta agus ar threoir
  • A chinneadh an bhféadfar muirear a chur i bhfeidhm má mheastar go bhfuil an t-iarratas gan údar nó iomarcach
  • A chinneadh an bhfuil faisnéis nó soiléiriú breise ag teastáil uait chun an t-iarratas a phróiseáil
  • A chinneadh an féidir an t-iarratas a fhreagairt laistigh de mhí amháin nó má tá síneadh ag teastáil
  • A chinneadh an gcomhlíonann an t-iarratas ceanglais shonracha an Dlí um Chosaint Sonraí
  • A chinneadh an bhfuil aon díolúintí le cur i bhfeidhm ar an iarraidh

Cé go mbeimid ag iarraidh i gcónaí cloí le hiarratais rochtana go hiomlán, in imthosca áirithe b’fhéidir go gcaithfimid d’iarratas a dhiúltú (áit a bhfuil cead againn é sin a dhéanamh). Míneofar diúltú dá leithéid duit i scríbhinn. Tabhair faoi deara nach bhfuil do chearta absalóideach.

Ceart Rochtana

Tá sé de cheart agat rochtain a iarraidh ar chóip de do shonraí pearsanta. Ina theannta sin, ní mór faisnéis eile a bhaineann le próiseáil, comhroinnt agus coinneáil do shonraí pearsanta a sholáthar duit freisin agus iarratas ar rochtain ábhair á bpróiseáil agat.

Ceart Chun Ceartú

Tá sé de cheart agat do shonraí pearsanta a bheith ceartaithe má tá sé míchruinn nó neamhiomlán. Má roinntear na sonraí pearsanta seo le tríú páirtithe, cuirfidh an ÚAO an tríú páirtithe sin in iúl faoin iarraidh cheartúcháin uaibh mura bhfuil sé seo dodhéanta nó má bhaineann sé seo le hiarracht dhíréireach. Sa chás go meastar go bhfuil sé réasúnta don ÚAO gan iarraidh ar cheartú a dhéanamh, míneofar an cinneadh seo duit i scríbhinn. Sa chás go mbaineann an earráid le sonraí arna gcur faoi bhráid an ÚAO ag rialaitheoir sonraí eile, déanfaidh an ÚAO an t-ábhar a tharchur chuig an rialaitheoir sonraí ábhartha maidir le gníomh cuí.

Ceart Chun Scriosadh

Tá sé de cheart agat scriosadh a scriosadh, ar a dtugtar an ceart chun dearmad a dhéanamh air, de do shonraí pearsanta ina bhfuil feidhm ag ceann de na forais seo a leanas:

  • Ní gá na sonraí pearsanta a thuilleadh maidir leis na críocha a bailíodh iad nó a próiseáladh ar shlí eile
  • I gcás go dtarraingíonn tú do thoiliú agus nach bhfuil aon bhunús dlí eile ann don phróiseáil
  • I gcás go ndéantar agóid i gcoinne na próiseála de bhun Airteagal 21(1) den RGCS
  • I gcás gur próiseáladh na sonraí pearsanta go neamhdhleathach
  • I gcás nach mór na sonraí pearsanta a scriosadh chun oibleagáid dhlíthiúil a chomhlíonadh
  • I gcás gur bailíodh na sonraí pearsanta maidir le tairiscint seirbhísí sochaí faisnéise linbh.

Is féidir iarratas ar shonraí pearsanta a scriosadh a dhiúltú nuair a bhíonn an phróiseáil riachtanach:

  • Chun an ceart chun saoirse cainte agus faisnéise a fheidhmiú
  • Ionas go gcomhlíonfar oibleagáid dhlíthiúil nó chun tasc leasa phoiblí a chomhlíonadh nó le feidhmiú údarás oifigiúil, a bheidh ag brath ar an ÚAO i mórán cásanna
  • Le haghaidh cúiseanna sláinte poiblí
  • Chun leasanna a chartlannú ar mhaithe le leas an phobail, taighde eolaíoch, stairiúil nó críocha staitistiúla
  • Éilimh dhlíthiúla a fheidhmiú nó a chosaint

Ceart Chun Srian a Chur le Proiseail

Tá sé de cheart agat próiseáil do shonraí pearsanta a shrianadh ina bhfuil feidhm ag ceann de na forais seo a leanas:

  • Sa chás go gcuireann tú comórtas ar chruinneas do shonraí pearsanta (ba chóir próiseáil a shrianadh ar feadh tréimhse a chuireann ar chumas an ÚAO cruinneas na sonraí a fhíorú)
  • Sa chás go bhfuil an phróiseáil neamhdhleathach, agus go gcuireann tú i gcoinne scriosadh agus iarrann tú srian ina ionad
  • Sa chás nach bhfuil na sonraí pearsanta de dhíth ar an ÚAO a thuilleadh ach éilíonn tú ar an ÚAO leanúint ar aghaidh ag próiseáil na sonraí pearsanta chun éileamh dlíthiúil a fheidhmiú nó a chosaint

Nuair a fheidhmíonn tú do cheart chun próiseáil a shrianadh, ní leanfaidh an ÚAO ar aghaidh ag próiseáil na sonraí pearsanta ach amháin:

  • Go dtoilíonn tú
  • Go bhfuil an phróiseáil riachtanach chun éilimh dhlíthiúla a fheidhmiú nó a chosaint
  • Go bhfuil an phróiseáil riachtanach chun cearta daoine aonair nó daoine dlítheanacha eile a chosaint
  • Go bhfuil an phróiseáil riachtanach le haghaidh cúiseanna leasa an phobail faoi dhlí an AE / Ballstáit, a bheidh an ÚAO ag brath ar a lán cásanna

Cuirfidh an ÚAO in iúl duit sula ndéantar an srian próiseála a fhoirceannadh / a fhorfheidhmiú.

Ceart Chun Iniomparthacht na Sonraí

Tá sé de cheart agat na sonraí pearsanta a chuir tú ar fáil don ÚAO a fháil i bhformáid struchtúrtha, a úsáidtear go coitianta agus atá inléite le meaisín.

Tá sé de cheart agat do shonraí pearsanta a tharchur chuig rialtóir eile. Baineann an ceart le sonraí pearsanta a chuir tú ar fáil don ÚAO agus do shonraí pearsanta a ghineann gníomhaíocht an duine ach ní shíneann sé sonraí a ghineann an ÚAO. Ní bhaineann an ceart chun iniomparthacht sonraí ach amháin:

  • Go bhfuil an phróiseáil bunaithe ar do thoiliú nó le haghaidh comhlíonadh conradh agus
  • Go ndéantar an phróiseáil trí mhodhanna uathoibrithe

Ní bheidh feidhm ag an gceart chun iniomparthacht na sonraí maidir le próiseáil is gá chun tasc a dhéantar ar mhaithe le leas an phobail a chomhlíonadh, nó i bhfeidhmiú an údaráis oifigiúil atá dílsithe sa ÚAO. Ina theannta sin, ní féidir leis an gceart chun iniomparthacht sonraí drochthionchar a imirt ar chearta agus ar shaoirsí daoine eile. Ní chuireann iniomparthacht sonraí tús go huathoibríoch le scriosadh do shonraí pearsanta ó chórais / próisis an ÚAO agus ní dhéanann sé difear don tréimhse choinneála bunaidh a bhaineann leis na sonraí pearsanta.

Ceart Chun Agóid a Dhéanamh

Tá sé de cheart agat cur i gcoinne phróiseáil do shonraí pearsanta ar na forais seo a leanas:

  • Margaíocht dhíreach; Sa chás go ndéantar sonraí pearsanta a phróiseáil chun críocha margaíochta dírí, tá sé de cheart agat cur i gcoinne na próiseála sin tráth ar bith; Níl aon fhorais ann diúltú iarraidh den sórt sin a chomhlíonadh. Nuair a chuireann tú i gcoinne próiseála chun críocha margaíochta dírí, ní féidir na sonraí pearsanta a phróiseáil a thuilleadh chun na críche sin.
  • Próiseáil bunaithe ar leas an phobail nó ar fhorais leas dlisteanacha, lena n-áirítear próifíliú.
  • Próiseáil chun críocha eolaíochta, taighde stairiúil nó críocha staitistiúla (mura bhfuil an phróiseáil riachtanach chun leas an phobail a chomhlíonadh).

Nuair a dhéanann tú agóid i gcoinne próiseáil do shonraí pearsanta, stopfaidh an ÚAO na sonraí pearsanta a phróiseáil mura féidir leis an ÚAO a léiriú go bhfuil forais dhlisteanacha láidre ann don phróiseáil a sháraíonn do chearta; Tá an phróiseáil riachtanach chun éilimh dhlíthiúla a fheidhmiú nó a chosaint nó chun na sonraí pearsanta a phróiseáil le haghaidh taighde eolaíoch, taighde stairiúil nó críocha staitistiúla, agus is gá próiseáil a dhéanamh chun leas/tasc poiblí a chomhlíonadh.

Ceart Chun Cur i gCoinne Cinnteoireachta Uathoibrithe, Lena n-Áirítear Próifíliú

Ní dhéanann an ÚAO aon chinneadh atá bunaithe ar phróiseáil uathoibrithe.

Is é an tAonad Staidrimh a dhéanann próifíliú teoranta d’fhonn a fháil amach ar thalamh socheacnamaíoch na mac léinn atá ag freastal ar oideachas ardleibhéil. Ligeann sé seo don ÚAO a spriocanna reachtacha a bhaint amach maidir le comhionannas gnóthachtála na deiseanna a chinntiú san ardoideachas.

Tá an ceart agat gan a bheith faoi réir cinnteoireachta bunaithe ar phróiseáil uathoibrithe amháin, lena n-áirítear próifíliú, a tháirgeann éifeacht dhlíthiúil a bhaineann leat.

Ceart toiliú a Tharraingt Siar

Nuair a phróiseálfaimid do shonraí bunaithe ar thoiliú, tá sé de cheart agat toiliú a tharraingt siar tráth ar bith gan aon drochthionchar a bheith agat. Ní éilíomar ach do thoiliú chun tacair sonraí áirithe a bhailiú sula nglacann tú le glacadh le háit ar chúrsa, is féidir leat toiliú a tharraingt siar chuige seo trí ríomhphost a sheoladh chuig dataprotection@hea.ie ag am ar bith. Féadfaidh do HEI do thoiliú a iarraidh chun do shonraí pearsanta a phróiseáil, agus na sonraí sin a roinnt linn. Más mian leat an toiliú seo a tharraingt siar téigh i dteagmháil le do HEI.

Gearán a dhéanamh leis an CCS

s é an Coimisiún um Chosaint Sonraí an t-údarás maoirseachta in Éirinn. Mura bhfuil tú sásta leis an gcaoi a bhfuilimid ag próiseáil do shonraí nó má tá aon imní ort maidir leis an bhfógra príobháideachais seo is féidir leat teagmháil a dhéanamh leis an CCS. Tá roinnt bealaí ann chun teagmháil a dhéanamh leis an DPC: foirm ar líne a úsáid ar a láithreán gréasáin; https://forms.dataprotection.ie/contact, fón; +353 (0) 761 104 800 nó +353 (0) 57 868 4800, nó tríd an bpost;

An Coimisiún um Chosaint Sonraí

21 Cearnóg Fitzwilliam Theas

Baile Átha Cliath 2

D02 RD28

Aguisín 1 – Catagóirí Sonraí Pearsanta

Gníomhaíocht próiseála sonraí Catagóirí Sonraí Pearsanta Bunús dleathach
Córas Taifead na Mac Léinn (SRS) Le haghaidh liosta iomlán de na tacair sonraí á mbailiú le do thoil cliceáil anseo tasc a rinneadh ar mhaithe le leas an phobail nó i bhfeidhmiú an údaráis oifigiúil atá dílsithe sa ÚAO
Suirbhé Rochtana Comhionainne (EAS) Le haghaidh liosta iomlán de na tacair sonraí á mbailiú le do thoil cliceáil anseo tasc a rinneadh ar mhaithe le leas an phobail nó i bhfeidhmiú an údaráis oifigiúil atá dílsithe sa ÚAO
Suirbhé ar Thorthaí Iarchéime (GOanna) Le haghaidh liosta iomlán de na tacair sonraí á mbailiú le do thoil cliceáil anseo tasc a rinneadh ar mhaithe le leas an phobail nó i bhfeidhmiú an údaráis oifigiúil atá dílsithe sa ÚAO
Ciste do Mhic Léinn faoi Mhíchumas (FSD) Sonraí a aithint, faisnéis oideachais, sonraí a bhaineann le sláinte tasc a rinneadh ar mhaithe le leas an phobail nó i bhfeidhmiú an údaráis oifigiúil atá dílsithe sa ÚAO
Láithreán Gréasáin Analytics (le haghaidh tuilleadh eolais féach ar ár mbeartas fianáin Seoladh IP Toiliú
Earcú Sainaithint, teagmháil, obair agus taithí oideachais Leas dlisteanach an ÚAO, tasc a rinneadh ar mhaithe le leas an phobail nó i bhfeidhmiú an údaráis oifigiúil atá dílsithe sa ÚAO
Riarachán ginearálta tascanna agus dualgais an ÚAO, mar shampla ag obair le hInstitiúidí Ardoideachais, ag déileáil le fiosruithe Aithint, teagmháil a dhéanamh tasc a rinneadh ar mhaithe le leas an phobail nó i bhfeidhmiú an údaráis oifigiúil atá dílsithe sa ÚAO

Tuilleadh Eolais

Reachtaíocht ábhartha

  • An tAcht um Ard-Oideachas 1971
  • An tAcht Comhdhlúite Leasa Shóisialaigh 2005
  • IR 317/2015 – Leas Sóisialach (Éilimh Chomhdhlúite
  • Íocaíochtaí agus Rialú) (Leasú) (Uimh. 4) (Leasú) 2015
  • Acht na nOllscoileanna 1997
  • An tAcht um Institiúid Teicneolaíochtaí 2006
  • Acht na nOllscoileanna Teicneolaíochta 2018