Our Data Protection Representative is Ruairí De Búrca who can be contacted at ruairí@dbglaw.ie.
What Data do we collect?
Our Firm collects personally identifiable information from our clients and prospective clients including:
Financial and Credit Card Information
Photograph, Passport, Driving License, other identification documents
Any other relevant data which may be required in the context of your case from time to time.
How do we collect your Data?
We will primarily collect data which you provide directly to us in connection with our services. Depending on the circumstances, we may also obtain personal data about you from other sources such as public registers, government and regulatory authorities, business partners, financial insurance advisors, service providers, banking and legal professionals etc. You are not obliged to provide us with your personal information however, if you do not, we may not be in a position to carry out the services required for you.
How will we use your Data?
Our Firm collects your data so that we can perform the services of a legal firm.
Our Firm collects your data so that we can provide you with legal services which you have requested of us or to take steps at your request prior to undertaking to provide services for you. We will gather and use your information to allow us to provide you with legal services and to comply with any legal obligations to which we might be subject (to include anti-money laundering). We may also provide you with information regarding other services that we offer which are similar to those which you have already requested of us. We may in limited circumstances utilise your personal data to inform you of legal updates relevant to you.
Basis of processing Data
The Firm is committed to processing data in a lawful, clear and transparent manner at all times for specific and legitimate purposes. The Firm relies on the following legal basis for processing data.
Processing necessary for the performance of a Contract.
Processing necessary for the compliance with a legal or statutory obligation.
To protect the vital interest of a Data Subject.
With the consent of the Data Subject for one or more specific and legitimate purposes.
Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.
Processing necessary for the purposes of the legitimate interest pursued by the Controller or a third party except where such interest is overridden by the fundamental rights and freedoms of the Data Subject.
Where we rely on the legitimate interest of the Firm for the processing of the personal data, we will take all reasonable measures to ensure that the interests of the Data Subject are protected. The legitimate interests of the Firm in this context includes providing information to you regarding changes in our services or to provide information to you about other services which we offer and to provide you with legal updates which might be relevant to you or your business.
We will only rely on consent as the basis for processing in limited circumstances. Where consent is utilised as the basis for processing, such consent can be withdrawn at any time. In that event, we will cease processing your data, unless there is a separate basis upon which we can rely to process your data, such as same being necessary for the performance of the contract between us or necessary for us to comply with our legal and statutory obligations.
We may also obtain certain sensitive personal data from our clients and prospective clients with their consent where necessary for performance of our obligations and provision of our services. Where such information is provided, the information will be shared only where necessary taking into account the nature of the information provided and the proposed services. Sensitive data will not be retained for any longer than is necessary for the performance of the Contract with the Company. We will not disclose sensitive personal data without your consent, reliance of the contractual obligations, specifically authorised or required by law, protection of the vital interest of the Data Subject or of any other natural person or where necessary for the establishment, exercise or defence of legal claims. We will ensure that processing of sensitive personal data is carried out in compliance of the GDPR at all times.
How do we store your Data?
The Firm securely stores your data at 1st Floor, Classic House, Washington Street, Cork. We also store your data on secure cloud servers provided by our technical partners. We will ensure the appropriate, technical and organisational measures are put in place commensurate with the level of security required for the data held on your behalf. We will use all appropriate and reasonable measures to ensure integrity and confidentiality of the personal data is maintained at all times.
Sharing of Personal Data
It may be necessary for us to share your personal data with third parties to enable us to comply with our legal and statutory obligations and to perform the contract between us. We will need to share the personal data provided by you to agents, contractors or partners of the Firm in connection with the services that these individuals or entities perform for the Firm. These include but are not limited to; providers of archiving services, barristers, overseas counsel, third party experts, accountants, financial and tax advisors and auditors. We also disclose or share your data in order to comply with any legal or statutory obligation or to enforce or apply our terms and conditions. Please note that our agents, contractors and partners are restricted from using your data in any way other than to provide services to the Firm for which they are engaged. We will never provide your data to a third party for marketing purposes.
We may also share your data with our professional advisors where necessary including lawyers, bankers, auditors and insurers who provide professional services necessary for the operation of the business of the Firm.
We do not propose to transfer personal data to any parties not resident within Europe save with your specific and explicit consent.
The Firm will retain your data for no longer than necessary for the purpose for which the data was provided and, in any event, no longer than required pursuant to the relevant Law Society regulations. Your data will be retained for a period of no less than six years beginning on the date that we archive your file.
Rights of Data Subject
You have the following rights under the GDPR, in certain circumstances and subject to certain exemptions, in relation to your personal data:
Right to access data – you have the right to request a copy of the personal data that we hold about you together with other information about our processing of that personal data.
Right to rectification – you have the right to request that any inaccurate data that is held about you is corrected or if we have incomplete information you may request that we request that we update the information such that it is complete.
Right to erasure – you have the right to request us to delete personal data that we hold about you. This is sometimes referred to as a right to be forgotten.
Right to restrict processing or object to processing – you have the right to request that we no longer process your personal data for particular purposes or object to our processing of your personal data for a particular purpose.
Right to data portability – you have the right to request us to provide you or a third party with a copy of your personal data in a structured commonly used readable format.
Right to object to processing – you have the right to object to processing of data under certain conditions.
If you wish to exercise any of the rights set out above, please contact Ruairí De Búrca at ruairí@dbglaw.ie.
We ask that you ensure that all data which you furnish to us is kept accurate and up-to-date at any stage. We cannot be held responsible for your failure to provide us with up-to-date information.
If we were processing personal data on the basis of your consent, you may withdraw consent at any time. This does not affect the lawfulness of processing which should take place prior to its withdrawal.
You can object to the processing of your personal data for direct marketing purposes at any stage. If you are unhappy with how we process your personal data, we ask that you contact us so that we can rectify the situation. You may also lodge a complaint the Data Protection Commission.
Automated decision-making and profiling
We do not use personal data for the purposes of automated decision-making or profiling.
Changes to this Privacy Notice
Our privacy notice may change from time to time. Any change to the Statement we post on this page. Please check back frequently to see how many updates or changes to our private policy have been implemented. If you do not agree to these changes or any of the terms of this policy, please do not continue to use this website to submit personal information.
Dated 22nd January 2021.