Last Updated: July 2021

Contents

  1. Introduction
  2. Data Controller
  3. What personal data does Image Skillnetcollect and why?
  4. Consent
  5. What are the data protection principles?
  6. Security of your personal data
  7. How long will we keep your personal data?
  8. Will we share your information with anyone else?
  9. Your data protection rights
  10. Requests by data subjects to exercise their rights
  11. Changes to the Privacy Statement8

Schedule 1 – Processing Description

 

1.   Introduction

1.1 Image Skillnet is partially or fully funding the training programme on which you are registered. We ask you to complete the Member Company Form, Trainee Profile Form where you will share certain personal details about your background. You will also be asked to complete a Reaction to Learning Form when you complete your training with us. The data you provide is invaluable to our continued efforts to provide a wide range of relevant and desirable training programmes, to communicate with you, and to enable us to operate

1.2 You may wish to review this Privacy Statement before completing the Image Skillnet Trainee Profile Form and Reaction to Learning

About Us

1.3 Image Skillnet is a national network which funds and facilitates enterprise-led learning for the hair and beauty sector.

1.4 For more information please contact details are as follows:

Image Skillnet
The Enterprise Centre,
Hill Road
Drumshanbo
Co Leitrim
00353719640438
info@imageskillnet.ie

About this Privacy Statement

1.5 Image Skillnet needs to collect and use data (information) to provide training programmes and to operate our business, to improve our services and to personalise your

1.6 This Privacy Statement relates to our privacy practices and policies in place for the data we collect in the Trainee Profile Form and Reaction to Learning Form. It sets out what personal data we collect and process about you in connection with the services and functions of Image Skillnet through our training programmes; where we obtain the data from; what we do with that data; how we comply with the data protection rules, who we transfer data to and how we deal with individuals’ rights in relation to their personal data. Links to all of this information may be accessed by clicking on the titles in the table of contents. Any personal data is collected and processed in accordance with Irish and EU data protection

1.7 All our employees and contractors are required to comply with this Privacy Statement when they process personal data on our behalf. Any failure by Image Skillnet employees or parties contracted to Image Skillnet, to comply with the data protection rules (including as they are outlined in this Privacy Statement) may result in disciplinary action or

1.8 Please note that we may disclose individuals’ information to trusted third parties for the purposes set out and explained in this document. We require all third parties to have appropriate technical and operational security measures in place to protect your personal data, in line with Irish and EU laws on data

2.   Data Controller

2.1 Data protection provides rights to individuals with regard to the use of their personal information (personal data) by organisations, including Image Skillnet and Skillnet Ireland. Irish and EU laws on data protection govern all activities we engage in with regard to our collection, storage, handling, disclosure and other uses of personal

2.2 Compliance with the data protection rules is a legal obligation. In addition, our compliance with the data protection rules helps individuals to have confidence in dealing with us and helps us to maintain a positive reputation in relation to how we handle personal

2.3 The data protection rules that apply to us are currently contained in the Data Protection Acts 1988 and 2003, in the ePrivacy Regulations 2011 and in related legislation (together the “DPAs”). As and from 25 May 2018, the applicable rules will be contained in the EU General Data Protection Regulation (EU Regulation 679/2016) (the “GDPR”) and in related Irish data protection legislation which gives effect to the

2.4Data controllers” are the people who or organisations which determine the purposes for which, and the manner in which, any personal data is processed, who/which make independent decisions in relation to the personal data and/or who/which otherwise control that personal

2.5  For the purposes of the GDPR, Skillnet Ireland are the data controller with regard to the personal Trainee data described in this Privacy

2.6 Skillnet Ireland Trainee Data Protection Policy is available HERE

 

3. What personal data does Image Skillnet collect and why?

3.1Personal data” means any information relating to an identified or identifiable natural person. Personal data can be factual (for example, a name, address or age range) or it can be an opinion about that person, their actions and

3.2 We set out in the table at Schedule 1 of this policy a description of the personal data that we collect in connection with our services and functions, why we are collecting this data, our legal basis for processing this data and the length of time for which we retain your data. (The table is referred to below as our “Processing Description”.)

3.3 We process the personal data for the purposes set out in our Processing Description and for any other purposes specifically permitted by the DPAs (or when applicable, the GDPR) or as required by law.

3.4 We collect this information from you through our Trainee Profile Form and Reaction to Learning Form which will be completed in hard

 

4.   Consent

4.1 By consenting to our processing your personal data in line with this Privacy Statement in the Trainee Profile Form and Reaction to Learning Form you are giving us permission to process your personal data specifically for the purposes

4.2 You may withdraw consent at any time by providing an unambiguous indication of your wishes by which you, by a statement or by a clear affirmative action, signify withdrawal of consent to the processing of personal data relating to you. If you have any queries relating to withdrawing your consent, please use the contact details are set out

4.3 Withdrawal of consent shall be without effect to the lawfulness of processing based on consent before its

 

5.   What are the data protection principles?

 5.1 The eight data protection principles apply to our organisation:-

A.) We process personal data fairly, lawfully and transparently. This obligation is inclusive of the fact that we have a valid legal basis for our processing of personal data (whether the consent of the person, or that the processing is necessary for our legitimate interests (as long as these interests do not outweigh the rights of data subjects) or some other legal basis set out under the DPAs or (when applicable) the GDPR). We are transparent with individuals about our processing of their personal

B.) We only collect personal data for specified, identified and legitimate

C.) We only process the personal data that we have collected for the purposes which we have identified or for purposes that are compatible with the purposes that we have

D.) The personal data that we collect and process must be adequate, relevant and limited to what is necessary for the

E.) The personal data that we collect and process must be accurate and (where necessary) kept up to-date.

F.) We do not keep personal data any longer than is necessary, bearing the purpose for which we collected it. This includes that we keep personal data in a form which permits identification of the data subject for no longer than is

G.) We keep personal data safe and secure from unauthorised access, deletion, disclosure or other unauthorised uses. This includes not just keeping data safe and secure from persons outside our organisation, but also from people within our organisation who have no need to access or use the personal data. We are also careful when transferring personal data outside the European Economic Area (“EEA”, being the EU plus Norway, Liechtenstein and Iceland), and make sure that we have a valid legal basis on which to transfer that data. Transfer can include using a cloud server that is located outside the EU or allowing people who are located outside the EEA access to personal data that is stored within the

H.) We comply with data subjects’ rights of information about, and (separately) access to, their personal data and with their other data protection rights, including rights to correct or erase their personal data, rights “to be forgotten”, rights to object to processing (including profiling), rights against automated decision-making and (under the GDPR) rights to data portability.

 

6.   Security of your personal data

6. 1 We take appropriate security measures against unlawful or unauthorised processing of personal data, and against the accidental loss of, or damage to, personal

6.2 We have procedures and technologies to maintain the security of all personal data from the point of collection to the point of destruction. Personal data will only be transferred to a data processor if he agrees to comply with those procedures and policies, or if he puts in place adequate measures himself. In addition, we have appropriate written agreements in place with all of our data processors.

6.3 We maintain data security by protecting the confidentiality, integrity and availability of the personal data, defined as follows:

A.) Confidentiality means that only people who are authorised to use the data can access

B.) Integrity means that personal data should be accurate and suitable for the purpose for which it is

C.) Availability means that authorised users should be able to access the data if they need it for authorised purposes. Personal data should therefore be stored on Skillnet Ireland’s central computer system instead of individual PCs or

6.4 We follow strict security procedures in the storage and disclosure of your personal data, and to protect it against accidental loss, destruction or damage. The data you provide to us is transferred to an application which is protected using SSL (Secure Sockets Layer) technology. SSL is the industry standard method of encrypting personal information and credit card details so that they can be securely

 

7.   How long will we keep your personal data?

We have set out in the Processing Description the length of time for which we will keep your information. After this time your personal information is permanently deleted from our records.

 

8.   Will we share your information with anyone else?

8.1 Your personal data may also be shared with Image Skillnet third parties for the purposes outlined in Schedule

8.2 We may pass your details to another agency but only if it is required by law, pursuant to our statutory functions, or if that agency is relevant to your

 

9.   Your data protection rights

9.1 Under certain circumstances, by law you have the right to:

A.) Request information about whether we hold personal information about you, and, if so, what that information is and why we are holding/using

B.) Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing

C.) Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you

D.) Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).

E.) Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this

F.) Object to automated decision-making including profiling, that is not to be subject of any automated decision-making by us using your personal information or profiling of

G.) Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing

H.) Request transfer of your personal information in an electronic and structured form to you or to another party (commonly known as a right to “data portability”). This enables you to take your data from us in an electronically useable format and to be able to transfer your data to another party in an electronically useable format.

 

10. Requests by data subjects to exercise their rights

10.1 Data subjects must make a formal request for personal data we hold about them or otherwise to exercise their data protections rights whether to make an access request or otherwise by contacting

10. 2 Contact as follows:-
Image Skillnet
The Enterprise Centre,
Hill Road
Drumshanbo
Co Leitrim
00353719640438
info@imageskillnet.ie

10.3 Note also that data subjects have the right to make a complaint at any time to a data protection supervisory authority in relation to any issues related to our processing of their personal data. As our organisation is located in Ireland and we conduct our data processing here, we are regulated for data protection purposes by the Irish Data Protection Commissioner. You can also contact the Data Protection Commissioner as follows:

10.4 Go to their website dataprotection.ie

10.5 Phone on +353 57 8684800 or +353 (0)761 104 800

10.6 Email info@dataprotection.ie

10.7 Address: Data Protection Office – Canal House, Station Road, Portarlington, Co. Laois, R32 AP23. Or 21 Fitzwilliam Square Dublin 2. D02 RD28

 

11. Changes to the Privacy Statement

Our Privacy Statement may change from time to time and any changes to the Statement will be posted on this page.

 

Schedule 1 Processing Description

What personal data

we take

Purposes of processing Legal basis for

processing

Retention period
 

First name and surname

 To contact you about training programmes you have registered for.

To contact you following completion of your training programme to evaluate the quality and impact of that training.

To enable Skillnet Ireland conduct risk assurance activities.

 

Legitimate Interest

 

No longer than 3 years, from the end of the year following completion of the your training programme

 

Contact details (phone number and email address)

 To contact you about training programmes you have registered for.

 To contact you following completion of your training programme to evaluate the quality and impact of that training.

 To enable Skillnet Ireland to conduct risk assurance activities.

 

Legitimate Interest

 

No longer than 6 years following the completion of your training programme.

 

Gender

 For aggregated and statistical reporting to the Department of Education and Skills.

 For aggregated and statistical reporting in the Skillnet Ireland Annual Report and other publications.

 

Legitimate Interest

 

No longer than 6 years following the completion of your training programme.

 

Age range

 For aggregated and statistical reporting to the Department of Education and Skills.

 For aggregated and statistical reporting in the Skillnet Ireland Annual Report and other publications.

 

Legitimate Interest

 

No longer than 6 years following the completion of your training programme.

 

What personal data

we take

Purposes of processing Legal basis for

processing

Retention period
 

Home County

For aggregated and statistical reporting to the Department of Education and Skills.

For aggregated and statistical reporting in the Skillnet Ireland Report and other publications.

 

Legitimate Interest

 

No longer than 6 years following the completion of your training programme.

 

NFQ level attained

For aggregated and statistical reporting to the Department of Education and Skills.

For aggregated and statistical reporting in the Skillnet Ireland Annual Report and other publications.

 

Legitimate Interest

 

No longer than 6 years following the completion of your training programme.

 

Employment status and details relating to this

For aggregated and statistical reporting to the Department of Education and Skills.

For aggregated and statistical reporting in the Skillnet Ireland Annual Report and other publications.

 

Legitimate Interest

 

No longer than 6 years following the completion of your training programme.