1. Who we are:
We are Rochford Gallagher & Co., Solicitors of Tubbercurry, County Sligo and of Ballymote, County Sligo. You can contact us at these addresses by post or by email to email@example.com.
2. Types of information we may collect from you:
We may collect, store and use the following kinds of information about individuals who visit and use our website:
A. Information you supply to us
You may supply us with information about you by filling in forms on our website. This includes information you provide when your submit a contact/enquiry form.
B. Information our website automatically collects about you.
With regard to each of your visits to our website, we may automatically collect information including the followingL
- technical information, including a truncated and anonymised version of your Internet protocol (IP) address, browser type and version, operating system and platform
- information about your visit, including what pages you visit, how long you are on the site, how you got to the site (including date and time), page response times, length of visit, what you click on, documents downloaded and download errors.
3. Why we process your data, the lawful basis for processing your data and who we share it with
A. For people who view and interact with our website, we process data to respond to your query when sent through our ‘Contact Us’ form.
The legal basis for this processing is our legitimate interest in the administration and operation of our legal services as well as our legitimate interest in marketing and promoting our firm’s legal services.
We may share this data with our Practice Management System Provider and our Email Service Provider. They may only process this data for the purpose of providing us with their services, and no other purpose.
We will retain this data for as long as is required to respond to your query. Once your query has been dealt with your data will be destroyed unless we believe the retention of data is necessary or to enable us to comply with regulatory procedures. This information will be retained according to our Data Protection Policy should you become a client of ours.
B. For our potential clients, we may process data in order to market the services of our firm.
The legal basis for the processing of this data is that the processing is necessary for the purpose of the legitimate interests of our firm in promoting our services.
We do not send out communication or newsletters to potential clients. We do not use any personal data for the purpose of automated decision-making or profiling.
We do not retain data in relation to people who visit our website solely for information.
C. For job applicants to the firm, if there is a position available, we process data to recruit new employees and to ascertain your suitability for a specific role.
The legal basis for this processing is that the processing is necessary for the purpose of the legitimate interests of our firm in recruiting new staff.
We may share the information you provide in your application with our contracted recruiter in order to make a shortlist of candidates. This recruiter is not permitted to use this data other than on our behalf. We may also send you emails about your application through our email service provider.
We will retain this data for the duration of the recruitment process and should you commence employment with us, for the duration of your employment.
D. For Solicitors and Barristers that we liaise with on client matters, we process data in order to liaise about client matters.
The legal basis for the processing of this data is processing necessary for the purposes of the legitimate interests pursued by our firm in representing our clients.
We share the information you provide with our Practice Management System in order to store your contact information with our client file. We may also send you emails through our Email Service Provider.
We will retain this data in compliance with our Data Protection Policy
4. Transfers of data outside the European Economic Area
We do not transfer data to any service provider located in outside the EEA.
Should a need to transfer data outside the EEA, appropriate safeguards will be put in place for this transfer is to enter into European Commission approved standard contractual clauses with the provider.
5. Information received from third parties and the source of that data
We may receive information from third parties particularly when we have instructed or been instructed by a third party in pursuance of the provision of legal services. This information will be received via DX, post or email and will be processed in compliance with our Data Protection Policy.
6. Your rights relating to personal data
You have the following rights under the GDPR, in certain circumstances and subject to certain exemptions, in relation to your personal data:
Right to access the data – you have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data.
- Right to rectification – you have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete.
- Right to erasure – you have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten.
- Right to restriction of processing or to object to processing – you have the right to request that we no longer process your personal data for particular purposes, or to object to our processing of your personal data for particular purposes.
- Right to data portability – you have the right to request us to provide you, or a third party, with a copy of your personal data in a structured, commonly used machine readable format.
In order to exercise any of the rights set out above, please contact us at the contact details at the start of this privacy notice.
If we are processing personal data based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing which took place prior to its withdrawal.
If you are unhappy with how we process personal data, we ask you to contact us so that we can rectify the situation.
You may lodge a complaint with a supervisory authority. The Irish supervisory authority is the Data Protection Commission.
7. Requirement to Process Personal Data
You may browse our website without providing us with any personal data and this will not affect your ability to view our website.
If you do not provide us with your information for the purposes described above, we cannot respond to your queries sent through our contact us form, liaise with you on client matters, or assess your suitability for a role within our firm.
8. Automated Decision-Making and Profiling
We do not use any personal data for the purpose of automated decision-making or profiling.