EIQA Privacy Statement

Privacy Statement – General

(effective from 25th May 2018)

This website is operated by EIQA Ltd. 26 Lower Baggott Street, Dublin, D02 P211, Ireland.

EIQA is a professional services company providing training, Q Mark audits and assessments based on the business excellence model.

This Privacy Notice outlines your rights, the information we may collect about you in general and through the website, and how EIQA uses this information.

Under EU data protection law (including the General Data Protection Regulations 2016/679 (GDPR) EIQA is the ‘data controller’ of data gathered via the website, and our Data Protection Officer can be contacted at info@EIQA.ie

If you have any questions about our Privacy Notice, please contact us at info@EIQA.ie

The type of personal information we collect

For marketing purposes we collect certain personal information about visitors and users of our sites. We collect personal information directly when you provide it to us, and automatically as you navigate through our Sites.
This information includes things like: email address, IP address, company name, and other contact details. This information may also contain information that you submit to us, such as the challenges your business is facing and the solutions that we offer that you are interested in learning more about.

Personal information we collect about you from others

On occasions, we may collect certain elements or categories of personal information about you from other sources. In particular these can be from two main sources:

A – Third party service providers (such as Google or Facebook) which may provide information about you when you connect, like, engage or link with our content and the provider sends us information such as your profile information from that service. This information can vary and is controlled by that service provider and is authorised by you via your privacy settings from that service provider; and/or

B – Third party sources / and or partners globally. Here, we receive additional information about you (to the extent permitted by applicable law in the EU), such as demographic data.

How we use personal information

Cases where we will use your personal information are:

A – Where it is necessary for purposes which are in our, or third parties’, legitimate interest. These include:

1. Maintaining and operating our Sites
2. Providing you with the services described on our sites
3. Verifying your identity when you sign in to any of our sites
4. Updating you with news and information about our Site and services. E.g., notifying you of changes to our Site, disruptions or updates
5. Conducting analysis of the site to ascertain how the site, content, and services of the site can be improved
6. Communicating with you by responding to comments, queries or other methods where a clear communication channel is being opened, such as a survey or questionnaire.
7. Improving our product, services, and offerings of the site
8. Providing general administrative and performance functions, as well as activities
9. Where we are required to share your data by competent authorities

B – Where you have given us consent to do so

1. Sending or providing you with marketing information about content, product or services which we feel may interest you
2. Altering and customising our services and sites to enhance your user experience. Such as advertising to you after or between your visits to our site. This will involve the use of cookies or similar technologies that are required to provide a more personalised experience.

C – If required to do so by law and to responses by government, law enforcement agencies or other competent authorities conducting an investigation

Where/ When we disclose your personal information

When legitimate need arises we may share your personal information with the following:

1. Subcontractors and service providers who assist us with the ways we use personal information (as detailed above). In particular, these include: website hosting providers which are located in EU; technical and customer support services located in the EU; marketing and analytics services which are located in the EU. Our subcontractors and service providers may also transfer and access such information from other countries from where they have operations.
2. Our professional assessors and auditors and advisers, such as lawyers, accountants, and business advisers, which are located in Ireland and the EU.

Where/When we transfer and/or store your personal information

Your data will be processed within Ireland, This is done on the basis that your consent to this policy acknowledges that we take care to work with subcontractors and service providers who we believe maintain the required standard of GDPR and general data security compliance.

How your information is secured

Your personal information is maintained on and stored on secure services managed by us and our service providers. Personal information that is stored and transmitted internally is protected by security measures, including password authentication, two-factor authentication, and/or data encryption.

How you can access your personal information

You have the right to make a request to us at any stage to access personal information we hold about you and to request corrections of any errors in that data. You may request that your information be deleted and ensure you will not be further contacted from the company unless you specify as and when, and sign up to receive our communications and materials again in line with GDPR compliance. If you are not satisfied with our response or think we are not in compliance with the law, you can complain to the Data Protection Commissioner, at info@dataprotection.ie

Marketing uses of your data

1. Where we have your consent to do so (such as subscribing to our email lists or stating an interest in receiving offers and information from us), we will send you marketing communications by email about content, resources, product or services that we feel may be of interest to You. You have the right to opt out of these communications at any stage if you would not like to receive them. This can be done by using the ‘unsubscribe’ feature in the email communication.
2. You also have the choice about cookies, as described below in the next section. You can modify your browser preferences which will allow you the choice to accept all cookies, be notified when cookies are set up (installed), or to reject all cookies.

Customer Data Collection

EIQA needs basic personal data in order to provide you with customer services such as Training, Q Mark Audits (Hygiene & Food Safety, Leisure Centres), Q Mark Assessments (Quality Management Systems, Quality of Care Nursing Homes) and Diploma in Quality Management; and to invoice you for registration,, training, audits and assessments or other services as the case might be. If customers do not provide this information, EIQA would be unable to provide the customers’ services requested. EIQA will not collect any personal data that we do not need in order to provide the services agreed.

Use of Customer Data

All personal data we hold is processed by EIQA staff, and no third parties will have access to your personal data unless there is a legal obligation for us to provide them with this.

We may communicate with you information about other services we can provide to you, and update you about EIQA (or other business-relevant) activities.

Where your information is used other than in accordance with one of these uses, we will first obtain your consent to that use.

How long EIQA maintains Customer Data

We will generally maintain your personal data for the duration of registration, and for two years beyond that, unless otherwise requested by you. If you consent to receipt of marketing information, any information for this purpose will be kept with us until you inform us you no longer wish to receive it. In the case of training delivery information, EIQA retains this data for as long as is prescribed by the Department of Education and Skills, or as otherwise required by law.

Sharing Customer Data

Personal data will only be shared with third parties including other data controllers where it is necessary for the performance of the EIQA’s duties as a data controller, or where you first give your prior consent.

For example, as an association with a small office, EIQA might request an electronic event organiser to distribute invitations on our behalf; or a publisher may distribute e-zines, magazines, diaries, or newsletters on our behalf; or an external contractor would be required to maintain our database software, or provide us with back-office administration services

Should personal data be transferred to territories outside the EU, it will only be placed on systems complying with measures giving equivalent protection of personal rights to those enjoyed within the EU.

Data Collection EIQA Website

Use of our website does not require registration of personal information.

If you use the contact form on the EIQA website, the information may be used, stored and maintained for the purposes you requested, unless we obtain your specific consent for other uses, or unless otherwise required or permitted by law.

EIQA may collect information about your activity at this website. The website may automatically recognise and store information about the type of browser you are using, your Internet Protocol (‘IP’) address, the time, the date, the length of your visit and the referring website. This information is collected via computer code sent to your computer (commonly referred to as ‘cookies’). When you visit our site there is certain information recorded which is often generally anonymous and does not reveal your identity to us. However, once you request more information from us and provide us with your contact details, we may be able to associate these histories together. These details include:

1. Your IP address
2. The date and time of your visit to our site
3. The length of your session on the site
4. The pages and resources you have accessed on the site
5. The number of times you access our site within any month
6. The file URL you visited and information related to it
7. The website which referred you to our site
8. Your device information such as operating system and dimensions of the screen on the device.

EIQA’s policy is to limit the information collected to the minimum required to complete a website visitor’s request.

EIQA does not seek any sensitive information through our website unless lawfully required for customers recruiting purposes. Sensitive information includes a number of types of data relating to race or ethnic origin, political opinions, religious or other similar beliefs, trade union, physical or mental health, sexual life, or criminal record.

If you use our website, or submit information to us through it, you consent to the collection and use of your information as described in this Policy Notice.

Cookies

Cookies are a small piece of computer code that a website can send to your (the visitor’s) computer so that the computer will be recognised by that site on your return. Cookies allow web servers to recognise computers connecting to them, speeding up the download of pages. Cookies may also be used by EIQA to establish statistics about the use of the website by visitors, by analysing data such as pages visited, browsing time, site performance, etc. Use of such data helps EIQA to improve the quality of our website.

Browsing data about visitors is automatically collected by EIQA servers. If you do not want to have this data collected, please do not use our website. You can also set your browser to prevent the acceptance of cookies, or to notify you the user when a cookie is being recorded. For optimal use of our website, we recommend that visitors do not block cookies.

The data collected by EIQA through cookies will not be kept for longer than is necessary to fulfil the purposes mentioned above. In any event, such information may not be kept for longer than two years.

All cookie data collected from EIQA’s website visitors will be protected from unauthorised access.

Transfer of User Data outside the User’s Jurisdiction

In order to provide our website, EIQA may need to transfer user data to locations outside the jurisdiction in which a visitor is viewing the website (the User Jurisdiction) and process User Data outside the User Jurisdiction. If the User Jurisdiction is within the European Economic Area (the EEA) please note that such transfers and processing of personal data may be in locations outside the EEA. Any data sent or uploaded by users may be accessible in jurisdictions outside the User Jurisdiction (including outside the EEA). The level of data protection offered in such jurisdictions may be less than that offered within the User Jurisdiction or (as the case may be) within the EEA.

However, EIQA requires any such data processors to advise us of the measures they take and provide for maintenance and protection of data privacy, which we can provide upon request to info@EIQA.ie

Updates and Amendments

EIQA reserves the right to modify or amend this statement at any time to ensure that it remains up to date with the latest legal requirements. The effective date will be displayed at the start of the notice.