HEA Data Collection Notice
The HEA must process your personal data to ensure adequate organisation of this event. The HEA is the data controller of this data. We use Microsoft Forms as a data processor to collect this information.
- HEA Data Collection Notice part 1
What is personal data and what is a personal data processing operation?
Personal data shall mean any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, and identification number, location data, an online identifier or to one or more factors specific to physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Personal data processing operations can be any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Short description of the processing activity
Organisation of a Community of Practice event.
Who is the Data Controller?
The HEA.
What personal data is collected?
You will be asked to provide your contact information including your name, email address and organisation.
Who has access to the personal data of data subjects and to whom can they be disclosed?
The HEA will collect your personal data and this data will only be shared with the Access Policy department in the HEA, for the successful organisation of a Community of Practice event.
Where did we get your personal data?
From the Microsoft Forms form.
- HEA Data Collection Notice part 2
What is the purpose and legal basis for processing your personal data?
Our purpose for collecting this information is so we can facilitate the event. This includes handling the personal information collected in the questionnaire, as well as facilitating follow-up actions.
The lawful basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.
We rely on your consent to process the personal data you give us to facilitate the event. This means you have the right to withdraw your consent at any time. If at any point you want to withdraw your consent, please email dataprotection@hea.ie. If you do that, we’ll update our records immediately to reflect your wishes.
- HEA Data Collection Notice part 3
How long will we retain your data?
We will delete the personal data received as part of this form 2 years after the event.
What are your rights regarding your data?
You have the right to access your personal data and to request your personal data to be rectified, if the data is inaccurate or incomplete; where applicable, you have the right to request restriction or to object to processing, to request a copy or erasure of your personal data held by the data controller. If processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent before its withdrawal. Your request to exercise one of the above rights will be dealt with without undue delay and in any case within one month.
We will never use automated decision making on your personal data.
Contact details for enquiries regarding your personal data
Please contact dataprotection@hea.ie for any queries.
You have the right to lodge a complaint with the Data Protection Commission (dataprotection.ie)
For more information on your rights, please see the HEA’s privacy notice – https://hea.ie/about-us/data_protection/