Privacy Policy

Last Updated: November 14, 2024

At +353 1 453-5984, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our website and services in accordance with the EU General Data Protection Regulation (GDPR) and Ireland privacy laws (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018).

1. Data Controller

+353 1 453-5984 acts as the data controller for the personal data we process. You can contact us using the details provided in section 10 of this policy.

2. Personal Data We Collect

We may collect the following categories of personal data:

  • Identity Data: Name, surname, username, date of birth, and other identification information.
  • Contact Data: Email address, telephone number, postal address, and other contact details.
  • Technical Data: IP address, browser type, device information, operating system, and website usage data.
  • Usage Data: Information about how you use our website and services.
  • Marketing and Communications Data: Your preferences for receiving communications and marketing materials.
  • Third-Party Data: Information we receive from social media platforms, business partners, or other third parties.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: Where you have given clear consent for specific processing activities.
  • Contract: To perform our contractual obligations or take steps before entering into a contract.
  • Legal Obligation: To comply with legal requirements under Ireland or EU law.
  • Legitimate Interest: For our legitimate business interests, provided they don't override your rights.
  • Vital Interests: To protect someone's life or physical safety.

4. How We Use Your Personal Data

Your personal data may be used for:

  • Providing and managing our products and services.
  • Processing your orders and managing customer relationships.
  • Responding to your enquiries and providing customer support.
  • Improving website functionality and user experience.
  • Sending marketing communications (with your consent).
  • Complying with legal obligations and regulatory requirements.
  • Protecting our rights, preventing fraud, and ensuring security.
  • Conducting analytics and market research.

5. Data Sharing and Disclosure

We may share your personal data in the following circumstances:

  • With service providers and processors acting on our behalf under appropriate data processing agreements.
  • To comply with legal obligations, court orders, or requests from public authorities.
  • In connection with a business transfer, merger, or acquisition.
  • With your explicit consent for specific purposes.
  • To protect the rights, property, or safety of our company, users, or others.

6. International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under GDPR.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no data transmission over the internet is completely secure.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods depend on the type of data and the purpose of processing.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of Access: Request information about how we process your personal data.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data in certain circumstances.
  • Right to Restrict Processing: Request limitation of processing in specific situations.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.
  • Right to Withdraw Consent: Withdraw consent for processing based on consent.
  • Right to Lodge a Complaint: File a complaint with the Ireland Data Protection Authority.

To exercise these rights, please contact us using the details in section 10.

10. Cookies and Similar Technologies

We use cookies to personalise your experience and improve website functionality. For detailed information, please see our Cookie Policy.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and recommend that you review their privacy policies before providing any personal data.

12. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately.

13. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Material changes will be notified through appropriate means, and we will update the "Last Updated" date.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us:

  • Email: info@kilmainhammuseum.ie
  • Address: Inchicore Road, Kilmainham Dublin D08 RK28, Ireland
Important Note: This Privacy Policy complies with GDPR and Ireland privacy laws. If you are not satisfied with our response to a privacy complaint, you may contact the Ireland Data Protection Authority (Garante per la protezione dei dati personali) at www.gpdp.it.