Privacy Policy

1Who we are

The controller of your personal data is Domhan Green Society (DGS), an unincorporated, volunteer-led non-profit based in Blackpool, Cork, T23, Republic of Ireland. You can reach us at info@domhangreen.com.

We have not appointed a Data Protection Officer because we are not required to. Send any privacy question to info@domhangreen.com.

2What we collect

• check_circleContact form: your name, email address, preferred language and your message.
• check_circleCommunity network sign-up: your contact details and participation preferences.
• check_circleStories and nominations: the story or nomination you send, with your name and contact details. If a story includes special category data (for example health or ethnic origin), we use it only with your explicit consent.
• check_circleNewsletter sign-ups: your email address and a record of your consent.
• check_circleProgramme registrations: the details the registration form asks for.
• check_circleMember accounts: your email address, name and a password hash. We never store your password in readable form.
• check_circleDonation interest: the details you give if you tell us you want to donate. No payments are taken online yet.
• check_circleAnalytics: only if you accept analytics cookies. See the Cookie Settings page.
• check_circleSecurity logs: IP address, time and the page requested, kept for site security.

3Why we use it and our lawful basis

• check_circleReplying to enquiries and running programmes: Article 6(1)(b), steps taken at your request. Where there is no contract, Article 6(1)(f), our legitimate interest in answering you and running our activities.
• check_circleStories, photos, newsletter and analytics: your consent, Article 6(1)(a). Special category data in a story is used only with your explicit consent, Article 9(2)(a).
• check_circleSafeguarding and security logs: our legitimate interests, Article 6(1)(f), in keeping people and the site safe.
• check_circleAccounting records: legal obligation, Article 6(1)(c).

4Who receives your data

We do not sell, rent or trade personal data. These providers handle data for us:

• check_circleMotive Journey: builds and runs the website and dashboard for DGS and processes data on our behalf as a processor.
• check_circleHostinger: server hosting. The server is located in the United Kingdom.
• check_circleBackblaze B2: encrypted backups, EU Central region.
• check_circleTitan Email (Flock FZ-LLC): sends our emails.
• check_circleGoogle Ireland Limited and Google LLC: Google Analytics 4 through Google Tag Manager, only after you consent. Before consent, Google Consent Mode sends cookieless pings without identifiers.
• check_circleCloudflare: Turnstile spam check on our forms.

We may also share data where the law requires it.

5Transfers outside the EEA

• check_circleOur UK hosting relies on the European Commission adequacy decision for the United Kingdom.
• check_circleGoogle and Cloudflare may transfer data to the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses.
• check_circleTitan may process data outside the EEA under Standard Contractual Clauses.

6How long we keep it

• check_circleEnquiries and form entries: 24 months after last contact.
• check_circleCommunity network and programme registrations: 24 months after last activity.
• check_circlePublished stories: until you withdraw consent. Unpublished submissions: 12 months.
• check_circleNewsletter: until you unsubscribe.
• check_circleMember accounts: while the account is active, plus 12 months.
• check_circleSecurity and access logs: 90 days.
• check_circleBackups: rolled over within 6 months (7 daily, 4 weekly and 6 monthly copies).
• check_circleGoogle Analytics data: 14 months. Google Analytics cookies (_ga, _ga_*): up to 2 years.
• check_circleAccounting records: 6 years.

7Your rights

Under GDPR you have the right to:

• check_circleaccess the personal data we hold about you;
• check_circlehave inaccurate or incomplete data corrected;
• check_circlehave your data erased;
• check_circlerestrict how we use your data;
• check_circlereceive your data in a portable format;
• check_circleobject to processing based on legitimate interests (Article 21), and to object at any time to direct marketing;
• check_circlewithdraw consent at any time. This does not affect processing done before you withdrew;
• check_circlenot be subject to decisions based solely on automated processing. We make none.

To use any of these rights, email info@domhangreen.com. We reply within one month.

8Complaints to the Data Protection Commission

You have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, www.dataprotection.ie. We would like the chance to help first, so please write to us as well.

9Do you have to give us your data?

Only the fields a form marks as required. Without them we cannot reply to you or complete your registration. Everything else is optional.

10Children

Our services are not aimed at people under 18 unless a parent or guardian is involved.

11Language

Our website is currently published in English only. Translated versions are planned for later, after human review. English will remain the original and legally binding version.