Ordnance Survey Ireland Data Privacy Notice
At Ordnance Survey Ireland we respect privacy. It is important that you know what we do with personal information that you and others provide to us, why we gather it and what it means to you. This document is being provided to you in line with our obligations under the General Data Protection Regulation (GDPR), which came into force on 25 May 2018. From that date, the GDPR, together with applicable Irish requirements, amend existing data protection law and place enhanced accountability and transparency obligations on organisations when using your information. The GDPR also introduced changes which give you greater control over your personal information.
This summary explains the most important aspects of how we use your information and what rights you have in relation to your personal information. Please take time to read this notice carefully. If you are under 16 years of age, please read this summary with a parent or guardian and ensure you understand it.
If you have any further questions about how we use your information, please contact our Data Protection Officer at the details below.
In this statement we use the terms “we”, “our” “us” and “OSi” to refer to Ordnance Survey Ireland.
Ordnance Survey Ireland, Ireland’s national mapping agency, was established as a statutory body by the Ordnance Survey Ireland Act, 2001, and tasked with delivering functions as set out in the Act.
We obtain personal information about you through your interaction with Ordnance Survey Ireland.
In order to provide the range of statutory functions we deliver, as well as the services supporting those functions, OSi need to process certain personal data in relation to you, which include:
Biographical data (Employees, prospective employees, board members, customers, suppliers, conference attendees, competition entrants, visitors to OSi)
We collect some of the following biographical data in order to facilitate our organisations functions: Name, address, telephone number, email address, age, job title, position, gender, PSSN, education details, details of prior employment, date of birth, proof of identity, photographs and CCTV footage.
Payment data (Employees, board members, customers, suppliers)
If you pay by direct debit or receive payments through electronic funds transfers, we will collect the IBAN, BIC and the name of your bank/building society or your credit card details where relevant.
Interactions with us (Employees, prospective employees, board members, customers, suppliers, conference hosts / attendees, competition entrants, visitors to OSi)
If you interact with us we will record details of those interactions (e.g. phone calls and logs of phone calls, email correspondence and hard copy correspondence).
It is OSi’s policy to only collect information that is required for the immediate purpose, i.e. to perform the functions of OSi, other applicable legislative provisions and of administrative support required to deliver our statutory functions. In your correspondence with us we ask you to disclose only as much information as is necessary to fulfil these requirements.
We collect information:
- you give us.
- information from your use of our products, services or our websites.
We collect and process personal data in order to perform the functions as set out in the Ordnance Survey Ireland Act, 2001.
These functions include:
- Creation and maintenance of State mapping and related geographic databases
- Maintenance and development of the underlying physical infrastructure which is required to support mapping applications
- Provision of mapping and related geographic information to the public and private sectors in support of social, economic, legislative, educational, security, business and administrative functions and requirements
- Promotion of the benefits of the use of the national mapping and related databases and the development of products, services and markets to meet national and user needs
- Provision of advice to the Government and public sector organisations on matters relating to the policy and practice of survey, mapping and geographic information and on the development of national spatial data infrastructures
- OSi also process personal data in respect of administrative support required to deliver our statutory functions.
- OSi are also entitled to process personal data under other legislative provisions that provide the basis for all public bodies to administer and comply with the requirements laid out in those provisions.
Ordnance Survey Ireland is the data controller in respect of this data.
OSi do not make any automated decisions and we only use the personal information given to us in accordance with the purposes that it was collected / provided for, i.e. we do not use this information for further processing.
We may disclose your personal information on a contractually bound confidential basis to external service providers so that they can provide services such as financial or administrative services in connection with the operation of our business; and to any person (where necessary) in connection with their services, such as, but not limited to, law enforcement and regulatory authorities.
If we engage external service providers, we will take reasonable steps to ensure those entities comply with their obligations under GDPR when they handle your personal information. We will also ensure external service providers are only authorised to use personal information for the limited purposes specified in our agreement with them.
We may disclose your data in the event that we merge, sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
Our contractors are restricted from using your data in any way other than to provide services for OSi, or services for the collaboration in which they and OSi are engaged. OSi requires that all contractors enter into contractual guarantees to observe security and privacy obligations as least as stringent as those set forth in this privacy statement.
How long we hold your data for is subject to legislation and regulatory rules we must follow. We have consolidated these retention periods into our data retention policy, copies of which are available from our Data Protection Officer (contact details below).
You are not obliged to provide us with your personal information. However, if you do not, we might not be able to carry out the services you have requested of us.
There are certain circumstances where we will transfer your personal data outside of the EEA to a country which is not recognised by the European Commission as providing an equivalent level of protection for personal data as is provided for in the EEA.
If we transfer your personal data outside of the EEA we will ensure that appropriate measures are in place to protect your personal data and to comply with our obligations under applicable data protection law. This may mean that we enter into contracts in the form approved by the European Commission, or we ensure that the company to which we transfer your personal data has agreed to abide by an approved transfer mechanism, such as the EU-US Privacy Shield framework.
The security of your personal data is important to us. We restrict access to personal information to Ordnance Survey Ireland employees, contractors and processors who have a requirement to process your personal information.
We comply with our data protection obligations by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
GDPR, together with applicable Irish requirements, introduced changes which give you greater control over your personal information. From 25 May 2018, you will have several enhanced rights in relation to how we use your information, including the right, without undue delay, to:
The right to know what categories of personal data we hold about you; the purpose of processing and any recipient or categories of recipient to whom your information has been disclosed.
The right to ask for a copy of any personal information which we hold about you, to correct any inaccuracies and to object to the processing of your personal data subject to certain criteria.
The right to have your information transferred where technically feasible. You can request that we no longer hold your personal information subject to certain criteria.
The right at any time to stop us from contacting you for marketing purposes at any point.
The right to lodge a complaint with a supervisory authority specifically in the member state where you habitually reside or place of the alleged infringement if you consider we have infringed your data protection rights.
We will respond within one month of the receipt of your request.
If you have any questions or concerns about how we process your data, you can contact us at the details below.
Our Data Protection Officer may be contacted by email to firstname.lastname@example.org, by phone at 01 8852434, or by mail to Ordnance Survey Ireland, Ordnance Survey Road, Phoenix Park, Dublin 8, D08 F6E4.
This notice, last updated in August 2018, will change from time to time and any changes will be updated on this page.