Data Protection Transparency Notice |
|
Identity and contact details of the data controller The CSO Communications Division is the Data Controller for this data (Rebecca FitzGerald-Smith) – UserResearch@cso.ie. |
|
Contact details of the Data Protection Officer |
|
Purpose(s) of the processing and the lawful basis for the processing This notice describes what personal information the Central Statistics Office (CSO) will collect/process for the purposes of CSO User Research, why we process this information, with whom this information is shared, and a description of the rights of submission authors with respect to their information. The CSO conducts periodic user research with CSO service users. This may take the form of user surveys, user interviews and usability tests conducted by the CSO and/or external research partners engaged by the CSO. CSO users may opt to join the CSO User Research Panel to express their interest in participating in CSO user research. For users who join the user research panel, the CSO requires personal information (name, email, age, location, occupation, areas of interest, engagement channels) to help us understand what areas of research to include them in and to allow us to contact them about participating in individual user research projects. Participation is voluntary and users can leave or opt out of the User Research Panel at any time. For research studies conducted by external research partners engaged by the CSO, the CSO requires personal information (name, email, age, location, occupation, areas of interest, engagement channels) to conduct the user research. This personal information may be shared with our external research partners to facilitate participant recruitment, and to arrange and carry out user research sessions. The personal data collected will solely be used for the purposes of the CSO User Research. It will be stored and retained in line with the provisions of the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. The legal basis for the processing is Article 6(1)(e) of the GDPR, and Section 38(1)(b) of the Data Protection Act 2018 – i.e. processing for the performance of a task carried out in the public interest or in the exercise of official authority. No personally identifiable data will be published from data collected for user research purposes. |
|
Where processing is based on the legitimate interests of the controller or a third party, the legitimate interests of the controller N/A |
|
Any other recipient(s) of the personal data The personal information collected may be shared with third parties engaged by the CSO for the purposes of carrying out user research. Arekibo Communications Ltd. are conducting a user research study on behalf of the CSO. A separate privacy notice is available from Arekibo covering each user research study they conduct. MSForms is used to collect personal information for participation in user research studies. EUSurvey is used to collect personal information for those opting into the user research panel. Calendly is used to schedule usability studies. |
|
Details of any intended transfers to a third country (non-EU member state) or international organisation and details of adequacy decisions and safeguards N/A |
|
The retention period or, if that is not possible, the criteria used to determine the retention period The data collected for the CSO User Research Panel will be held on an ongoing basis. Members of the Panel will be contacted annually with a reminder of how they can opt out. The data collected for individual User Research studies will be deleted on the completion of the process or as set out in the Transparency / Privacy Notice provided by our external research partner for that study. |
|
Data subject rights You have the following rights under data protection law, although the ability to exercise these rights may be subject to certain conditions:
|
|
Consent N/A |
|
Right to lodge a complaint with the Data Protection Commission Under the General Data Protection Regulation, you have a right to lodge a complaint with the Data Protection Commission if you consider that processing of your personal data is contrary to data protection law. The contact details of the Commission are: By post: Office of the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland. |
|
Whether the provision of personal data is a statutory or contractual requirement, necessary to enter into a contract, an obligation, and the possible consequences of failing to provide the personal data N/A |
|
The existence of any automated decision making processes that will be applied to the data, including profiling, and meaningful information about how decisions are made, the significance and the consequences of processing No data will be used for the purpose of automated decision making or profiling. |