1. Introduction
TÉ fully respects your right to privacy and actively seek to preserve the privacy rights of data subjects who share personal data with it. Any personal information which you provide to TÉ will be treated with the highest standards of security and confidentiality, in accordance with data protection legislation.
This Privacy Statement explains the following:
- How TÉ collects your personal data.
- The purpose and legal basis for processing your personal data.
- How TÉ securely stores your personal data.
- Details of third parties with whom TÉ shares personal data.
- How long TÉ retains your data.
- Cross-border / international data transfers (if any).
- Your rights under data protection legislation.
A glossary of terms can be seen at Appendix A. Further details of Data Subject Rights for Customers can be seen at Appendix B.
2. How TÉ collects your personal data
TÉ collects personal data to manage and deliver its services to you. This data may be collected directly from you by TÉ staff or from other systems under the control of TÉ.
3. Purpose and legal basis for processing personal data
The personal data TÉ collects from you will only be processed by TÉ for the specific and lawful purposes as outlined in this Privacy Statement. TÉ will ensure that your data is processed fairly and lawfully in keeping with the principles of data protection as set out under Article 5 GDPR.
In order for the use of personal data to be lawful, it should be processed on a legal basis as set out under Articles 6 and 9 of GDPR.
Specific information on the legal basis for processing your personal data will also be provided at the point of collection of personal data. These may include:
- Where the processing of personal data is a statutory function of TÉ as a public authority. The statutory functions are set out in the Tailte Éireann Act 2022 and other, functional legislation as set out in the Act, including the Valuation Act, 2001, the Registration of Title Act, 1964, the Registration of Deeds and Title Act 2006 and the Ordnance Survey Ireland Act, 2001.
- Where TÉ is required to process personal data by law or for complying with employment law.
- Where the processing of personal data is necessary for the formation of a contract with you.
- Where the processing of personal data is not related to the official functions of TÉ, it may sometimes process personal data based on legitimate interests e.g., for the administration of events, purchases and the use of its services.
- Generally, when processing special categories of personal data, TÉ will seek explicit consent for the processing of data except where another condition applies e.g. legal requirements.
TÉ has compiled processing records, in accordance with Article 30 GDPR requirements. If you require further detail, please contact dataprotection@tailte.ie.
4. How TÉ securely stores your personal data
Personal data will be stored confidentially and securely as required by TÉ. TÉ is committed to ensuring that the processing of your data safeguarded by appropriate technical and organisational security measures relevant to the processing in accordance with Article 32 GDPR requirements.
When TÉ stores your personal data on its systems, the data will be stored either on TÉ premises, or on secure IT platforms within the European Economic Area (“EEA”) or external of the EEA which are subject to Chapter V GDPR requirements.
5. Details of third parties with whom TÉ shares personal data
TÉ will only share your data with third parties where necessary for the purposes of processing outlined in this Privacy Notice. In accordance with Article 28 GDPR, when TÉ shares your data with third parties, it will ensure that the data is processed according to specific instructions and that the same standards of confidentiality and security are maintained.
When TÉ shares your data with the third parties, TÉ will endeavour to share only the data that is needed, to ensure that the data is only processed according to our specific instructions and that the same standards of confidentiality and security are maintained. Once the processing of the data is complete any third parties with whom data was shared will be required to return the data to TÉ save where they are required to retain it by law.
6. How long TÉ retains your data
TÉ will store your data for the duration of processing and as required by law and in line with its records management policies.
7. Cross-border / international data transfers (if any)
While a majority of TÉ’s data processors are based in the EU/EEA, in some, limited cases, the data processor for certain purposes may be based outside of the EU/EEA. In all such instances, TÉ will ensure to carry out all necessary due diligence checks and put in place appropriate contractual obligations as published by the European Commission. For all cross-border data transfers, a comprehensive “Data Transfer Impact Assessment” will be carried out prior to processing, to assess if the country where data is being imported will afford the same level of protection as within the EU. Appropriate safeguards as per Article 46 of the GDPR will be put in place for such transfers.
8. Your rights under data protection law
You have the following rights over the way TÉ processes your personal data. For further information please see the TÉ customer data subjects’ rights policy.
8.1 Right of Access
You have the right to request a copy of the personal data which is processed by TÉ and to exercise that right easily and at reasonable intervals. Further information is available in the TÉ SAR Policy.
Under Article 15 of the GDPR, individuals have the right to access their personal data that is under the control of TÉ. Responses to access requests will be issued within 30 days unless an extension is required.
To access your personal data:
- Complete the Data Subject Access Request Form. Please give as much information as possible about the data you wish to access.
- Include photo ID and proof of address as described on the form with your application.
- Send the form to Tailte Éireann Data Protection Officer at dataprotection@tailte.ie
8.2 Consent
You have the right to withdraw your consent to TÉ processing your personal data at any time when consent is the legal basis for the processing. It is advised that such requests are made to TÉ in writing.
8.3 Rectification
You have the right to request that inaccuracies in personal data that TÉ holds about you are rectified.
8.4 Erasure
You have the right to have your personal data deleted where TÉ no longer has any justification for retaining it.
8.5 Object
You have the right to object to processing your personal data if:
- TÉ has processed your data based on a legitimate interest or for the exercise of the public tasks of Tailte Éireann and if you believe the processing to be disproportionate or unfair to you.
- The personal data was processed for the purposes of direct marketing or profiling related to direct marketing.
8.6 Restriction
You have the right to request to restrict the processing of your personal data if:
- You are contesting the accuracy of the personal data.
- The personal data was processed unlawfully.
- You need to prevent the erasure of the personal data in order to comply with legal obligations.
- You have objected to the processing of the personal data and wish to restrict the processing until a legal basis for continued processing has been verified.
8.7 Portability
Where it is technically feasible, you have the right to have a readily accessible machine-readable copy of your data transferred or moved to another data controller where TÉ is processing your data based on your consent and if that processing is carried out by automated means.
8.8 Right to be notified
Users have the right to be notified if their data was:
- Used in a manner they did not agree to.
- If their data was subjected to a GDPR breach.
- If their data is being used for purposes of profiling them (them specifically in an identifiable manner as opposed to anonymised and used for generic profile reporting).
8.9 Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling which produces legal effects concerning you or significantly affects you. Applications for registration submitted to TÉ are not subject to automated processing.
9. Cookies
TÉ uses information gathered from cookies to help improve your experience of its websites. Some cookies are essential so users can move around the websites and use their features. TÉ’s websites may also contain third party cookies. You can refuse or consent to third party cookies when you first visit TÉ websites. Details of cookies used are set out in the cookies policies on TÉ’s websites.
Where appropriate, you may choose to refuse the use of cookies by selecting the appropriate settings on your browser. However, this may reduce the ability to utilise the full functionality of certain websites.
TÉ currently operates the following websites and hubs:
- Tailte Éireann main website – tailte.ie
- GeoSpatial Data Hub (and sub-sites) – geohive.ie
- Land Registry – landdirect.ie
- Registration – eRegistration.ie
- Valuation map app – maps.tailte.ie
- Valuation help desk – helpdesk.tailte.ie
- Valuation Local Authority Portal – valuationportal-blue.tailte.ie
- Valuation Occupier portal – occupierportal.tailte.ie
10. Further information
If you have any queries relating to the processing of your personal data for the purposes outlined above, you can contact the Tailte Éireann Data Protection Unit at dataprotection@tailte.ie.
If you are not satisfied with the information TÉ has provided to you in relation to the processing of your personal data or you are dissatisfied with how TÉ is processing your data, you can make a complaint to the Data Protection Commissioner. Their contact details are Data Protection Commission, 21 Fitzwilliam Square, Dublin 2 or by phone on 01 765 0100 / 1800 437 737.