Purpose and scope of notice

This Data Protection Notice (this "Notice") is intended to explain how your Personal Data will be handled by Common Knowledge Centre for Sustainable Living Company Limited by Guarantee ("Common Knowledge", "our", "we" and "us") and sets out the personal information detailed below relating to you ("Personal Data") that will be collected and processed by us, Common Knowledge, and/or on our behalf by our third party service providers if you visit our website ourcommonknowledge.org (the "Website"), if you interact with us via our social media platforms, if you contact us or enter into correspondence with us, take a course with us, if you make a donation, or subscribe to our membership programme, if you volunteer with us, or if you express an interest in doing any of these.  We are required to notify you of this information under the General Data Protection Regulation ("GDPR").

For the purposes of this Notice, the controller of your Personal Data is Common Knowledge CLG, (company number 705098), with registered address at Ballyea North, County Clare.

Our Privacy Manager is Fionn Kidney (fionn@ourcommonknowlege.org)

Your personal data collected and obtained

Please note that the below list of Personal Data we may collect about you, while intended to be as complete and accurate as reasonably possible, is not exhaustive and may be updated from time to time. We may collect and process some or all of the following Personal Data about you set out below.

Personal data we Collect via Our Website

When you use our Website we may collect certain Personal Data from you. This may include information about your device browser including your IP address, the type of device you used to access the internet, whether you reached the Website using a search engine or if you clicked a link on another website and other information derived from cookies used on the Website. This can also include details of your visits to the Website such as traffic data, location data, linked websites that you can access through the Website.

Contact and Correspondence Personal Data

If you contact us or enter into correspondence with us, we may collect some or all of the following: name; address; e-mail address; phone number; and any Personal Data you may communicate to us.

Donating / Taking a Course / Subscription Personal Data

If you make a donation, pledge trees, or subscribe to our membership programme, via our Website or otherwise, we may collect some or all of the following: name; address; e-mail address; age; gender; and credit / debit card details.

Volunteering Personal Data

If you sign up to volunteer with us, via our Website or otherwise, we may collect some or all of the following: name; address; gender; age; e-mail address; phone number; what you would like to achieve by volunteering; where you would be travelling from; details of any contributions you may make; any preferences and living requirements you may have; and any other Personal Data you may choose to communicate to us.

Third Party Sources

We may receive the following personal data about you from third party sources.

Third Party Personal Data

We may receive information about you from third parties. For example, where our employees or volunteers have listed you as their emergency contact and provided your name and contact details.

Service Provider Personal Data

We may receive information such as your name, address, phone number, email address, age, gender or purchase/payment/donation information from our third-party service providers, including but not limited to: Stripe (our payment platform); and Squarespace (our website hosting platform).

Social Media Personal Data

We may receive limited information about you from social media platforms, such as Facebook, Twitter, Instagram and LinkedIn, when you interact with us via such platforms. This includes information such as details of how you shared our Website via the social media resources on the Website.

How and why we process your data

Below, we set out the legal bases on and purposes for which we collect and process your Personal Data.

Entering into or Performance of a Contract

It is necessary to process your Personal Data to enter into and perform a contract with you. We process your information to allow us to deliver training and complete the payment transaction. You are obliged to provide us with your Personal Data as it is necessary to enter into a contract with us and otherwise, we will not be able to process your payment

Consent

When you freely and voluntarily give us your Personal Data for the Purpose(s) listed, you consent to our processing of your personal data. The purpose of this is to take into account any information, preferences and / or requirements you may notify of use if you are engaging with us as a volunteer or otherwise, as well as seek views and comments on the activities we are undertaking. You may withdraw consent for us to process your Personal Data at any time. However, please note that any processing carried out before you withdraw your consent will remain valid.

Compliance with a Legal Obligation

It is necessary for us to collect and process your Personal Data in order to comply with legal obligations imposed on us. For example, to ensure compliance with our legal obligations, for example under applicable provisions of company, tax and charity law.

Legitimate Interests

It is necessary for the purposes of our legitimate interest to process your Personal Data. For example, to send you marketing communications, newsletters or information about your subscriptions, donations and tree pledges, and / or perform data analytics to develop an understanding of those who donate, pledge trees or purchase subscriptions. In volunteering situations, we also collect this data to contact you in emergencies where a volunteer has listed you as their emergency contact or make arrangements with you and to engage your assistance when you sign up as a volunteer with Common Knowledge. You have a right to object at any time to the processing of your Personal Data where we process your Personal Data on the legal basis of pursuing our legitimate interests. You also have a right to object at any time to the processing of your Personal Data for direct marketing purposes.

Disclosure of your data

We may disclose some or all of the Personal Data we collect from and obtain about you to the following third parties:

Third Party Service Providers

Such as Squarespace, Stripe.

Other Recipients

Or where we are under a duty to disclose or share your Personal Data in order to comply with any legal or regulatory obligation or request

Transfers of your personal data

The Personal Data that we collect from you is stored inside the European Economic Area ("EEA"). We do not transfer your Personal Data outside the EEA.

Retention of your personal data

In general, we expect to keep your Personal Data for as long as is necessary for the purpose for which it is collected and a reasonable period (typically two years) thereafter. Once we have determined that we no longer need to retain your Personal Data, we will delete it from our systems.  

Please note that in certain circumstances, we may retain your Personal Data for a longer period if we determine that we are required to do so, for example, if we are processing an ongoing claim or believe in good faith that the law or a relevant regulator may reasonably in our view expect or require us to preserve your Personal Data. 

How we store your data

We care about protecting your Personal Data. That is why we put in place appropriate measures that are designed to prevent unauthorised access to, and misuse of, your Personal Data. These include measures to investigate and deal with any actual or suspected data breach.

We are committed to taking reasonable and appropriate steps to protect the Personal Data that we hold from misuse, loss, or unauthorised access. We do this by having in place a range of appropriate technical and organisational measures.

Your rights

You have rights in relation to your Personal Data, which are set out below. Note that in certain circumstances these rights may not be absolute.

Below sets out the rights at your disposal to address any concerns or submit queries to us about our processing of your Personal Data.

Right of Access

You have the right to request a copy of the Personal Data held by us about you. We will only charge you for making such an access request where we feel your request is unjustified or excessive.

Right to Rectification

You have the right to request that we amend any inaccurate Personal Data that we have about you.

Right to Erasure

You have the right to ask us to erase your Personal Data where your Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by us; you withdraw your consent and no other legal ground permits us to process your Personal Data; you object to the processing and there are no overriding legitimate grounds for the processing; your Personal Data have been unlawfully processed; or your Personal Data must be erased in order to comply with a legal obligation. 

We may not be able to comply with a request where we require your Personal Data for compliance with a legal obligation or in connection with legal proceedings or for exercising our own rights.

Right to Restriction of Processing

You have the right to ask us to restrict processing your Personal Data in the following situations: where you contest the accuracy of your Personal Data; where the processing is unlawful and you do not want us to delete your Personal Data; where we no longer need your Personal Data for the purposes of processing but you require the data in relation to a legal claim; or where you have objected to our processing of your Personal Data pending the verification of whether or not our legitimate business interests override your interests, rights and freedoms or in connection with legal proceedings.

When you exercise this right we may only store your Personal Data. We may not further process the Personal Data unless you consent or the processing is necessary in relation to a legal claim or to protect the rights of another person or legal person or for reasons of important public interest. We will inform you before the processing restriction is lifted.

Right to Data Portability

You may request us to provide you with your Personal Data which you have given us in a structured, commonly used and machine-readable format and you may request us to transmit your Personal Data directly to another data controller where this is technically feasible. This right only arises where we process your Personal Data on the basis of your consent or where it is necessary to perform our contract with you and the processing is carried out by automated means.  

Right to Object

You have a right to object at any time to the processing of your Personal Data where we process your Personal Data on the legal basis of pursuing our legitimate interests. 

You have a right to object at any time to the processing of your Personal Data for direct marketing purposes.

You can exercise any of these rights by submitting a request to our Privacy Manager, Erin McClure in writing, at alice@hometree.ie. 

We will provide you with information on any action taken upon your request in relation to any of these rights without undue delay and at the latest within one month of receiving your request. We may extend this up to two months if necessary, however we will inform you if this arises. Please note that we may ask you to verify your identity when you seek to exercise any of your data protection rights. 

You also have the right to lodge a complaint with the Data Protection Commission. For further information see www.dataprotection.ie.

Changes to this notice and questions

We may amend this Notice on occasion, in whole or part, at our sole discretion. Any changes will be effective immediately upon communicating the revised Notice to you.

If at any time we decide to use your Personal Data in a manner significantly different from that stated in this Notice, or otherwise disclosed to you at the time it was collected, we will notify you by e-mail or post and you will have a choice as to whether or not we use your Personal Data in the new manner.

If you have any questions, comments or concerns about the way your Personal Data are being used or processed by Common Knowledge, please submit your question, comment or concern in writing to our Privacy Manager, Fionn Kidney at fionn@ourcommonknowledge.org