HEA Data Collection Notice
The HEA is the data controller of the data. We use MS Forms as a data processor to collect this information.
What is personal data and what is a personal data processing operation?
Personal data shall mean any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Personal data processing operations can be any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Short description of the processing activity
The information collected through this form will be used to build case studies for Blended Intensive Programmes that will be shared on our website eurireland.ie
Who is the Data Controller?
The HEA.
What personal data is collected?
We collect your full name, email address, position and institution, as well as basic information about the Blended Intensive Programme, and your written response about your Blended Intensive Programme experience.
Who has access to the personal data of data subjects and to whom can they be disclosed?
Only HEA staff involved in International Programmes will have access to your data, and they will not disclose it to any third parties.
Where did we get your personal data?
From the European Commission systems.
What is the purpose and legal basis for processing your personal data?
Our purpose for collecting this information is so we can facilitate case studies on Blended Intensive Programmes to be published on our website. Your personal data will not be used for an automated decision-making including profiling.
How long will we retain your data?
The HEA/NA will only retain personal data for as long as it is necessary to do so and in accordance with all relevant laws and policies. While the retention of personal data is required under GDPR, this Policy also governs the retention of non-personal records held by the HEA/NA. Under the GDPR, organisations are not permitted to retain personal data for longer than is necessary, in line with the Article 5 principle of storage limitation.
What are your rights regarding your data?
You have the right to access your personal data and to request your personal data to be rectified, if the data is inaccurate or incomplete; where applicable, you have the right to request restriction or to object to processing, to request a copy or erasure of your personal data held by the data controller. If processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent before its withdrawal. Your request to exercise one of the above rights will be dealt with without undue delay and in any case within one month.
We will never use automated decision making on your personal data.
Contact details for enquiries regarding your personal data
Please contact dataprotection@hea.ie for any queries.
You have the right to lodge a complaint with the Data Protection Commission (dataprotection.ie)
For more information on your rights, please see the HEA’s privacy notice- https://hea.ie/privacy-and-data-protection/