Data protection policy
Ardconnel Court comply with the Data Protection Act 1998 (DPA), the General Data Protection Regulation (GDPR) and and the Privacy and Electronic Communications Regulations (PECR). The GDPR comes into effect on the 25th May 2018. This Notice is updated whenever changes are made to relevant data protection legislation.
Date this Notice was created: 20th May 2018
Date this Notice was last modified: 20th May 2018
Ardconnel Court collects and uses information (data) about our clients and bodies that our team have contact with, and follow the 8 principles outlined within the Data Protection Act 1998.
Principles of the Data Protection Act 1998
Personal information must:
- be fairly and lawfully processed
- be processed for limited purposes
- be adequate, relevant and not excessive
- be accurate and up to date
- not be kept for longer than is necessary
- be processed in line with the date subjects’ rights
- be secure
- not be transferred to other countries without adequate protection
Sharing information with third parties
Ardconnel Court shall not pass on your personal data to any third party. Please note how you booked your apartment at Ardconnel Court, third parties such as Booking.com or Trip Advisor may have access to your contact information as a result. However, in certain circumstances, the Data Protection Act allows personal data to be disclosed to law enforcement agencies without the consent of the data subject. Under these circumstances, Ardconnel Court will disclose requested data.
Your rights under the GDPR
Under the GDPR, you have a number of different rights relating to your personal data and how it is processed. They are as follows:
- Right to be informed about the collection and use of your personal data.
- Right to access your personal data, and any supplementary information which constitutes personal data.
- Right to have your personal data rectified; this means you can ask Ardconnel Court to correct your personal data if it changes, turns out to be inaccurate, or is incomplete.
- Right to have your personal data deleted; this means that you have the right to request the deletion or removal of your personal data. There are some circumstances when you do not have this right.
- Right to restrict Ardconnel Court processing your personal data.
- Right to data portability.
- Right to object to Ardconnel Court processing your personal data.
- Rights related to automated decision making including profiling.
- Most of these Rights will apply to your personal data and how it is processed by Ardconnel Court, but some (such as the right to data portability and rights related to automated decision making including profiling) are not relevant to this business at the time of writing.
- If you want to know more about your rights, please click here. For other information relating to data protection legislation, please visit the ICO website
The data we collect, how we use it and why
- Client contact information – contact details are collected at the time of booking so that all visitors receive the information required ahead of their stay at Ardconnel Court. This information is only stored for as long as necessary.
- E-newsletter mailing lists – collected via e-newsletter subscription link. Prior to GDPR coming into force on the 25th May 2018, Ardconnel Court have asked all subscribers to re-subscribe for the mailing list whereby they’ll receive seasonal e-newsletters and updates. All previous mailing lists that were used prior to GDPR have been deleted.
- Social Media – by following our Facebook, Twitter and Instagram social media accounts, we process data based on your consent. This includes social media analytics which shows us the demographics of our followers, the information they find most interesting with statistics on reach and engagement.
Your right to withdraw consent or update details
All individuals who are the subject of personal data held by Ardconnel Court are entitled to:
- Ask what information the company holds about them and why
- Ask how to gain access to it
- Be informed how to keep it up to date
- Be informed how the company is meeting its data protection obligations
You have the right to withdraw your consent for Ardconnel Court processing your personal data. If you wish to do so, please email firstname.lastname@example.org.
Your right to lodge a complaint
As well as the right to withdraw consent and exercise any of the above rights mentioned under ‘Your rights under the GDPR’, you also have the right to raise a complaint with a regulatory body. In the United Kingdom, this is the Information Commissioner’s Office (ICO). If you have concerns about the way your data is being processed by an organisation, you can find out more here.