Privacy Notice
PRIVACY NOTICE — DRAFT FOR REVIEW
Lismore GAA & Camogie Development Fund
This template must be completed and reviewed before publication. It is not legal advice.
1. Data controller
The clubs must decide and document which legal entity/entities determine the purposes and means of processing supporter data. Insert controller name(s), postal address and privacy contact: [DETAILS]. If both clubs jointly determine purposes and means, assess a joint-controller arrangement under GDPR Article 26.
2. Data collected
May include name, email address, payment mandate/transaction references, contribution status, payment dates and amounts, cancellation information and correspondence. Payment details should be entered directly with the payment provider, not collected through this ordinary webpage.
3. Purposes and lawful basis
Data may be used to administer recurring contributions, reconcile payments, handle queries and cancellations, maintain financial records, prevent misuse and meet legal obligations. The clubs must document the appropriate lawful basis for each purpose before launch.
4. Recipients and providers
Access is restricted to authorised fund administrators. Identify the payment provider, website host and any email provider, and review their privacy terms and data-processing arrangements: [PROVIDERS AND LINKS].
5. Marketing
A contribution does not automatically subscribe someone to marketing emails. Any optional marketing signup must be separate, clear and unticked by default, and comply with applicable electronic-marketing rules.
6. Retention
Keep active-contribution records for administration and financial records for applicable legal/accounting periods. Delete or anonymise other data when no longer needed. Insert the approved retention schedule: [PERIODS].
7. Security
Restrict access to authorised roles, use strong passwords and multi-factor authentication where available, and establish a process for data requests and suspected breaches.
8. Rights and contact
Depending on the circumstances, people may have rights to access, rectify, erase, restrict or object to processing, and data portability where applicable. Contact [PRIVACY EMAIL]. Complaints may be made to Ireland's Data Protection Commission: https://www.dataprotection.ie/.
9. Updates
Effective date/version: [DATE / VERSION].