Introduction
On the 25th May 2018, the General Data Protection Regulation (GDPR) came into effect. In Ireland, GDPR has been given legislative effect in the new Data Protection Act 2018.
This new legislation updates the current law in relation to data protection and seeks to strengthen and unify data protection for all individuals within the European Union, including Ireland. It grants new and enhanced rights for all individuals in relation to their own personal information. An individual about whom data is held by an organisation is referred to as a data subject.
Donegal Education and Training Board (ETB) is the state education and training authority for the Donegal region, established by the Education and Training Boards Act 2013.
To fulfil its statutory obligations, Donegal ETB gathers, stores, and processes large amounts of data on a variety of data subjects. This would include students, learners, staff, third parties, and members of the public. This personal data can range from personal details and CCTV footage to financial transactions. Personal data is any data that permits an individual to be identified.
Donegal ETB is committed to a policy of protecting the rights and freedoms of individuals with respect to the processing of their personal data.
The Data Protection regulations and legislation require the staff of Donegal ETB to process data fairly and to ensure the security of that data.
You can view the relevant legislation here:
Principles of Data Protection (GDPR)
We follow the seven principles set out under GDPR:
- Lawfulness, Fairness, and Transparency
- Purpose Limitation
- Data Minimisation
- Accuracy
- Storage Limitation
- Integrity and Confidentiality
- Accountability
What This Means for You
We must clearly inform you about:
- What data we hold
- Why we hold it
- How it is processed
- Your rights under data protection law
Who We Process Data About
We collect and process personal data from:
- Students
- Adult Learners
- Parents / Guardians of students under 18
- Staff
- Volunteers
- Board and Committee Members
- CCTV system footage
Why We Process Your Data
We use your data for purposes including:
- Education administration
- Employment and human resources
- Health and Safety
- Communications and service provision
- Financial processing
- Security and access control (including CCTV)
- Statutory compliance
Legal Basis for Processing
We process data based on:
- Legal obligations
- Public task or statutory function
- Contractual necessity
- Consent
- Vital interests
- Legitimate interests (balanced against your rights)
Your Rights Under GDPR
You have the right to:
- Access your data
- Rectify inaccuracies
- Erase your data (“right to be forgotten”)
- Restrict processing
- Object to processing or automated decision-making
- Data portability
- Withdraw consent at any time (where consent was the legal basis)
- Complain to the Data Protection Commission
Digital Age of Consent
The digital age of consent in Ireland is 16 years. This means that for any student under the age of 16, parental or guardian consent is required before their personal data can be used by online services, such as social media platforms.
Donegal ETB, along with its schools and centres, is committed to safeguarding students’ personal data in line with this legal requirement and does not permit the use of under-16s’ data for such purposes without appropriate consent.
Making a Data Subject Access Request
You are entitled to request access to any personal data we hold about you. To ensure this data is protected and to verify your identity, we require one of the following verification methods along with our subject access request form available on our Publication & Resources page under Data Protection.
- A copy of State identification (passport or driver’s license)
- Present yourself in person with ID at the Administration Offices in Letterkenny, or email it to: dataprotection@donegaletb.ie
Policies and Supporting Documents
Policies
Donegal ETB maintains a suite of policies and documents to support GDPR compliance. Our policies, which include the Data Processing Policy and CCTV Policy, are available on our Donegal ETB Policies page here.
Privacy Notices & Supporting Documents
Donegal ETB provides a range of supporting documentation to ensure transparency and compliance with data protection legislation. These include:
- Privacy Notices for students, staff, and other data subjects
- Records Retention Schedules
- Data Breach Protocol
These documents are available in the Publications & Resources section of our website under Data Protection.
For further information on Data Protection and the General Data Protection Regulation, please visit the Data Protection Commission.