Data Protection Statement

Personal Data Category

Description

Identification Data

may include a person’s name, date of birth, driver’s license and passport

information.

Contact Data

may include a person’s email address, phone number and postal address

Communication Data

may include phone calls, email correspondence and hard copy correspondence. This includes recording of phone calls when you phone the

Credit Union.

Marketing Data

may include your contact data and any preferences in receiving marketing

from us and your communication preferences.

Recruitment Data

may include recruitment related data such as identification data, contact data, communication data, CV and job application data.

This may include employment history, skills/ experience, languages, educational history, qualifications, membership of professional associations, contact details of employer references/character references, licenses held,

interests and hobbies, languages, locations, nationality, passport, eligibility to work in certain jurisdictions, salary expectations, interview/screening

answers and notes.

Financial Data

may include payment related information or bank account details and

financial data received as part of the services that we provide.

Special Category Recruitment Data

If we interact with you for the purposes of a job with the Credit Union, we may collect recruitment data that is of a special category per the GDPR

definition.

CCTV Data

We operate CCTV cameras at some of our premises. If you pass by and/or

visit some of Blarney Credit Union’ premises, your image may be recorded

on CCTV.

Web Data

may include personal data provided on any forms on our website and, to the extent that it includes personal data, information on the type of device

you’re using, its IP address, operating system, referral source, length of visit,

page views and website navigation paths, as well as information about the

timing, frequency and pattern of your service use.

Social media data

We receive personal data about website users when they follow social

media links on our website.

Purpose of Processing

     Categories of Personal Data

      Lawful Basis

Managing payments and administration of the contract including:

·      To carry out due diligence on suppliers prior to entering into a contract

·      to process payments to and from our business

·      to fulfil our legal/contractual obligations

·      to manage/respond to complaints/issues

·      Contact Data

·      Communication Data

·      Financial Data

·      Contract

·      Legitimate Interest

·      Legal Requirement

Recruiting staff including:

·      to interview the Candidate

·      to manage our database of Candidates

·      to contact you in connection with any job position we may have open

·      to check your suitability for the role

·      to fulfil the recruitment needs of the business.

·       Identification Data

·       Contact Data

·       Communications Data

·       Recruitment Data

·       Web Data

·       Special Category Recruitment Data

·      Legitimate Interests

·      Consent

·      Contract

Website delivery including:

·      to manage and respond to web forms

·      to promote our products and services

·      to administer the Website

·      To manage your website experience

·      To improve our website content

·      for internal operations, including support, troubleshooting, data analysis, testing, research, statistical and survey purposes

·      to ensure the safety and security of our website and our services.

·       Web Data

·       Contact Data

·      Legitimate Interests

·      Consent

Ensuring security of the Blarney Credit Union

premises

·       CCTV Data

·      Legitimate Interests

Social Media Account Management including:

·      To market our services to you through social media interactions

To respond to enquiries about our services

·       Contact Data

·       Correspondence data

·       Social media data

·      Consent

·      Legitimate Interest

Management of Corporate Affairs

·      to take minutes at board meetings

·      to contact shareholders/investors

·      to enter into partnerships and other commercial relations

to undertake appropriate due diligence

·       Identification Data

·       Contact Data

·       Communication Data

·       Financial Data

·      Contract

·      Legitimate Interest

·      Legal Obligation

To meet our regulatory obligations:

To comply with the Credit Union (Amendment) Bill 2023. Issuing AGM and Annual Accounts notification by email and/or text

·       Contact Data

·       Identification Data

·       Correspondence Data

·       Financial Data

·      Legal Obligation

Purpose of processing

       Categories of Personal Data

Retention Period

Relationship Management

·         Contact Data

·         Communications Data

·         Identification Data

·         Financial Data

24 months after completion of service delivery activities in the case where there is no further meaningful engagement.

Certain Personal Data may be retained for 7 years

Marketing & Sales

·         Contact Data

·         Communication Data

·         Marketing Data

·         Web Data

12 months in the case where no meaningful engagement or earlier in the case you unsubscribe.

Recruitment

·         Identification Data

·         Contact Data

·         Communications Data

·         Recruitment Data

·         Web Data

·         Special Category Recruitment Data

3 months for unsuccessful candidates

Website Delivery

·         Web Data

·         Contact Data

12 months or less

Security

·         CCTV Data

30 days

Management of Corporate Affairs

·         Identification Data

·         Contact Data

·         Communication Data

·         Financial Data

7 years unless required to retain indefinitely