This page gives important information about how Impact Privacy collects and uses the personal information of the people who work for our clients.

Overview of how we use your personal information

We have summarised below how Impact Privacy uses your personal information. We do not collect or use sensitive personal information.

Impact Privacy Limited

The data controller is Obséy International Limited t/a Impact Privacy. We can be contacted at:

93 Upper Georges Street, Dun Laoghaire, Co. Dublin, A96 V1K8

Or by emailing us at: [email protected]

What we use your personal information for

Promoting the services of Impact Privacy
We may obtain your personal business contact details (such as email, telephone number, address, position) from you, or from publicly available sources (like LinkedIn). If you have attended an event (including an event we may host through a third-party provider), we may also receive these details from the event organiser or third-party provider.

Where we are allowed, we will use your personal information to contact you about, or send you information on, Impact Privacy’s services. This may be because:

• you have requested them, or
• we feel our services may be of interest to you, given your position in the business you work for.

We always follow applicable direct marketing rules. If you want us to stop promoting our services to you, please let us know. You can also opt-out of receiving our direct marketing emails at any time.

Enquiries
You may make an enquiry about our services (for example, through our contact page). If you do, we use the information you give us to:

• provide you with information about our services;
• respond to and manage your enquiries and requests; and/or
• manage any pre-contract discussions between Impact Privacy and the business you work for.

Using our services

When we provide our services, we will collect and use your personal information. Any personal information you give us, or which we obtain, when providing our services will be used for:

• providing our services in accordance with our contract with our client (the business you work for); and
• managing our relationship with our client.

Other uses of your personal information

Enforcing legal rights
We will use your personal information for the enforcement or protection of our legal rights.

Administration, quality, and training
We will use your personal information to:

• help administer our business (including in accordance with legal or other obligations we must meet);
• manage our relationship with you;
• maintain quality standards; and
• design and deliver internal training.

System and product development
Your personal information is used to support the development and improvement of our systems and products. This can include using your information for:

• the purposes of surveys; and
• providing your personal information to third parties so they can provide services to us in respect of system and product development or improvement in accordance with our instructions.

Who else gets your personal information?

Impact Privacy does not disclose your personal information for a business purpose except as set out in this Privacy Statement. Your personal information is never otherwise sold or shared to third parties.

To help us provide our solutions and services, the personal information described above is disclosed to third parties who provide services to us, including:

• information technology and information services providers;
• other third-party service providers; and
• professional and other third-party advisers.

These third parties can only use the personal information to provide their services to us or to support our delivery of our services to you. They must follow our instructions and they are not permitted to sell or share your personal information.

Your personal information is not disclosed to anyone else.

In certain circumstances, we may be obliged to disclose your personal information to a public authority in response to a lawful request or to respond to legal process. We will only make such disclosure to the extent such request is lawful.

How long do we keep your personal information?

We will only keep your personal information for as long as we are legally required, or if longer, for the period the personal information is needed for the purposes we have collected it.

Lawful use of your personal information

We only use your personal information if lawfully we can do so.

European Union and United Kingdom
As our client will be the business you work for, our use of your personal information is in all cases necessary in Impact Privacy’s legitimate interest in conducting and managing our business (for the purposes we have described above) and enforcing our legal rights.

You do have the right to object to this processing and can do so by writing to us at our address or emailing us. If you do object, this may affect our ability to provide our services and solutions to the business you work for.

In some cases, we may ask for your consent to send you information and materials about Impact Privacy’s services. In this case, our lawful use of your personal information for this purpose remains Impact Privacy’s legitimate interest (as described above), but your consent is provided for the purposes of meeting the requirements of direct marketing laws.

Transfers of personal information

Impact Privacy may transfer personal information to third party service providers, who are required to use that personal information only for the purposes of providing their services to Impact Privacy in accordance with Impact Privacy’s instructions. In some cases, these providers may be in countries outside of the European Union. Where your personal information is transferred to these locations, it is only for use by Impact Privacy for the purposes described in this privacy statement. In each case, these transfers are subject to adequate safeguards as prescribed by law.

If you wish to receive further information on these transfers and the safeguards in place, please contact us at [email protected]

Your rights?

In addition to the right to object to the processing of your personal information, depending on the country or state laws that apply, you may also have the right to:

• access your personal information and have disclosed to you what personal information we have collected, used, shared or sold about you, and for what purposes;
• require us to delete your personal information;
• opt-out of the sale of your personal information;
• rectify any personal information we hold that is incorrect; and/or
• have your personal information transmitted to another data controller.

Where applicable, if you want to exercise these rights please let us know. We may ask you to provide sufficient information to verify and complete your request. Subject to the rights you have, and to any legal or other requirements, we will complete your request within thirty days.

Lodging a complaint – European Union

You can at any time complain about our processing of your personal information with the Irish Data Protection Commissioner (www.dataprotection.ie).

This statement was published on January 30, 2024. If you wish to see prior versions of this statement, please contact us.