Privacy Policy
Waterford Suir Valley Railway Privacy Statement
This Privacy Notice aims to provided you (the data subject) with information about the processing of your personal data when you interact with the Waterford Suir Valley Railway (WSVR). In order to avail of our services WSVR will need to process some of your personal data. This is information which is capable of being used to identify you as an individual, for example your address and your image.
Who we are
WSVR, is a registered charity (Charity Reference Number: CHY 13857) with the goals of preserving our industrial railway heritage and educating visitors about the rich history in Waterford. We are a Data Controller as we have the responsibility for deciding how and why
your personal data will be used. Under the General Data Protection Regulation (GDPR), we have obligations which we take seriously that include keeping your data safe, up to date and accurate. We will only use your data for the purpose set out below.
Our Lawful basis
As a Controller we need a lawful basis for processing your personal data. We rely on Legitimate Interest for most of our processing. This is one of the six lawful bases under
Article 6 of the GDPR.
Details of the processing we undertake
We collect personal data about you from forms that you may complete or by interactions you have with us in relation to the services operate. Some personal data is also collected when you visit our website (https://www.wsvrailway.ie) which provides information on our services and opening hours. More information about this can be found on our main Privacy Policy by
visiting https://www.wsvrailway.ie/privacy-policy
We store your data onsite and do not share your data unless we are required to do so under legislation, such as with Revenue for donations, or with the Gardai / Insurance company where there has been an incident that needs investigating.
In delivering our services we may use specialist IT companies, but only under contract where they are obliged to take appropriate care of your data. For instance, if we implement online bookings.
Summary of personal data we process and why
WSVR, for the delivering our services, gathers and processes the following types of personal data.
Personal data Category | Purpose | How long do we need this data for? |
---|---|---|
Financial data | To take payment for tickets / to receive donations | 7 Years |
Contact details (address, telephone, email) | To record membership or donations or to send newsletters | 7 years for donations 12 months after end of membership Until you unsubscribe |
Your image via CCTV | For health and safety, security | |
IP address and other technical data | Where you permit us, we will use this data to identify your preferences, where you are visiting from and to better understand what pages are of interest. | 12 months. (please see our cookie policy for full details) |
Your data protection rights
Under data protection law, you have many rights in relation to your personal data and how other people use it. Below we have listed these rights, but you may find out more about your data subject rights by visiting www.dataprotection.ie.
- Access: you have the right to know what personal data belonging to you we process and obtain a copy of any or all of that data, including the purpose for processing, the categories of personal data we process, any recipients of your data, and the rules for determining how long we will retain it. This in known as a Subject Access Request;
- Rectification: you have the right to request the correction of any inaccurate personal data held by us;
- Erasure: you have the right to request that we erase personal data that is no longer required for legal, regulatory or justified operational record-keeping purposes;
- Restrict processing: you have the right to request that we restrict processing where the accuracy of the personal data is contested, the processing is unlawful, or where the personal data and/or evidence of its processing is required by you to establish, exercise or defend legal claims;
- Data portability: you have the right to receive your personal data in a common, machine-readable format (where you have provided it initially in this format), to facilitate its transfer by you to another controller, where technically feasible and subject to specified conditions;
- Object to processing: you have the right to object to processing where it is taking place on the basis of WSVR’s performance of a task carried out under Legitimate Interest;
- Challenge automated decision making: you have the right not to be subject to a decision based solely on automated processing, including profiling. (WSVR does not currently undertake any automated processing);
If you have any queries or concerns about how we process your data, or if you wish to exercise any of your rights please contact our Data Protection Officer (DPO) who has been appointed to help ensure your rights are upheld. It is easiest to contact our DPO at Waterford Suir Valley Railway by email but you can also contact them by telephone or post using the details listed below.
Telephone | + 353 (0)51 384058 |
info@wsvrailway.ie | |
Post | Operations Manager Waterford & Suir Valley Railway Company, Kilmeadan Station, Kilmeadan, Co Waterford, Ireland. |
If you believe WSVR has processed your data incorrectly you are also able to request support from, or submit a complaint to, the Data Protection Commission (DPC). We
encourage you to visit their website as they provide useful explanations of your rights and our obligations. The contact details for the Commission are as follows:
Website | www.dataprotection.ie |
Telephone | +353 57 8684800 or +353 0761 104 800 |
info@dataprotection.ie | |
Post | 21 Fitzwilliam Square Dublin 2 D02 RD28 Ireland |
Irrespective of whether you make a compliant to the Data Protection Commission or not, you also have the right to go to court to seek an effective judicial remedy where you consider that your rights under the GDPR or Irish data Protection Legislation have been infringed as a result of WSVR, or our data processors processing your data in a way that is in not compliant with our obligations.