This document explains how we collect and process your personal data. When you've read this, you should be able to understand how and why we collect your personal data on this website, how long we keep it and your rights with respect to any personal data that we hold.
If you have any questions, or want to exercise your rights under the GDPR, please refer to the email/physical address supplied at the end of this document.
How and why we collect Personal Data
We collect personal data via various forms and the shopping cart on the website. Should you email us directly, we will be provided with any personal data that you supply.
Enquiry Forms
We have several enquiry forms on our website. All our enquiry forms will request your name, email address and contact number in order to facilitate communication with you.
Newsletter
If you signup for our newsletter, we request your name and email address so that we can personalise your greeting and email it to you.
Login form
In order to login, you must already have an account on our website. Your login details (username and password) are simply checked against what we already have on record.
Shopping Cart
The personal data we request and store includes your name, contact details and physical address. This is so that we can create a legal invoice. We also ask for two means of contact - email address and phone number, so that we can contact you quickly if the need arises (eg if a tour is suddenly cancelled). When you make a purchase, you are given a choice to 'opt in' to our email marketing campaign which you can opt out of any time. Please note that we do not store your credit card details.
Fraud Detection
We collect and store the IP address of any visitor whose actions triggers our Firewall software. Typical examples include multiple failed login attempts and the crafting of hacker-style urls designed to elicit server information. Any IP address collected due to suspicious activity is used by us for the sole purpose of preventing illegal access to the website.
Non Personal Data Collection
We use Cookies for various tasks on the website. Some of these are essential to allow for registering an account, site security and purchasing tours, but all other non-essential cookies (functional, statistical and marketing) can be turned on/off as you wish. Please refer to our Cookie Policy for more details.
How long we keep your Personal Data
Enquiry Forms
If you've contacted us to make an enquiry - whether you've used one of our contact forms, or you've just emailed/called us, we keep your name, email address, phone number (if you called) and any other personal data you've given us for 12 months since we last heard from you. Please note, that doesn't preclude us from having your personal data in the case that you've recently taken a trip with us, or you're signed up for our newsletter.
Newsletter
If you've signed up for the Newsletter, your name and email address are kept by us indefinitely. Once you unsubscribe your personal data is deleted.
Purchases on the website
If you have made a purchase on the website, we keep the data you submitted (except for credit card details which we don't store) indefinitely if you are an existing client, or for 6 years following your last transaction for revenue and auditing purposes. Dormant accounts (no activity for 6 years) will be requested to re-activate their account. On failure to do so, the account and all records of transactions will be completely deleted.
Fraud Detection
We retain the IP address of any visitor whose behaviour triggers our Firewall software for up to 12 months.
Non personal data
The anonymised data collected for our use via Google Analytics is kept for 36 months. For more details please see our Cookie Policy.
Who we share your data with
Your name, address, transaction and credit card details will be shared with our payment gateway but only for the purposes of processing your payment, or in the event of a dispute with the payment processing. To understand more about Stripe's Data Protection policies please refer to https://stripe.com/ie/privacy
If you sign up for the Newsletter, your data is stored securely by Mailchimp (USA). Mailchimp will never use or share your personal data, please refer to https://mailchimp.com/legal/privacy/ to understand how they process your personal data.
If you book a trip abroad with us, the details you provide in the booking form will be shared with Premier Travel Cork who act on our behalf as sole Travel Agent. Premier Travel Cork will never market to you, nor share your personal details except when required legally, when required by foreign immigration and/or for audit purposes. To understand more about Premier Travel's data protection rules, please refer to http://www.premiertravel.ie/privacy.
Please note that while we will never share your data unless we have to, we will only do so if we believe in good faith that we are required to disclose it in order to comply with any applicable law, a summons, a search warrant, a court or regulatory order other statutory requirement.
Your personal data may also be provided to relevant third parties in the case of our business being sold, merged or made insolvent.
Does your Personal Data leave the EU?
In the case of the Newsletter, yes. Your name and email address will be stored on servers in the USA. To understand Mailchimp's policy on European data transfers, please refer to https://mailchimp.com/help/mailchimp-european-data-transfers/
In the case of a trip abroad, your personal data will be shared with immigration officials of the country(ies) we arrive and depart from.
Otherwise your data resides in the EU.
Is your Personal Data secure?
Your personal data (apart from the exceptions in Does your Personal Data leave the EU) resides in the EU and is secured using the most up to date and modern technology.
Marketing
We will never share your personal data with anyone for the purposes of them marketing to you. And we will only market to you if you have explicitly consented for us to do so.
Minors
You must be 17 years or older to purchase courses or products from our website. If you are under 17, you must get your parent's or guardian's permission before submitting personal data via enquiry forms on our website.
Your Rights under the General Data Protection Rules (GDPR)
- You have the right to retrieve a copy of your personal data in machine readable format
- You have the right to transfer your data to another provider
- You have the right to request the removal of your data ("right to be forgotten")
- You have the right to request a restriction from processing your data
- You have the right to withdraw your consent to our use of your personal information at any time
- You have the right to have your request dealt in 30 days of receipt
If you wish to exercise your rights please send details of your request along with 2 photocopies of recent bills (or similar) which show your name, your address and a date no later than 3 months from the date you sent your request to:
This email address is being protected from spambots. You need JavaScript enabled to view it.
Or by post to:
Mícheál de Barra
Carpe Diem Tours
'Dunbarra'
Baile an Fheirtéaraigh Thiar
Trá Lí
Co. Chiarraí V92 DF43
Ireland
In case of a dispute you have the right to contact the Data Protection Authority, please see: https://www.dataprotection.ie