Effective Date: November 1, 2024
This Privacy Policy explains how Gaulish Antiquities Hub ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at discovergallmuseum.site, visit our physical facility, or use our services. We are committed to protecting your privacy and complying with applicable Irish and European Union data protection laws, including the General Data Protection Regulation (GDPR).
1. Information We Collect
1.1 Information You Provide Directly
We collect information that you voluntarily provide to us, including:
- Contact Information: Name, email address, phone number, and mailing address when you book services, register for programs, or contact us.
- Payment Information: Credit card details and billing information when you purchase tickets, memberships, or services (processed securely through third-party payment processors).
- Research Information: Academic credentials, research proposals, and institutional affiliations when applying for research access.
- Feedback and Communications: Comments, questions, and feedback you provide through our contact forms, surveys, or direct communications.
- Program Participation: Information about your participation in educational programs, tours, or events.
1.2 Information Collected Automatically
When you visit our website, we automatically collect certain technical information:
- Usage Data: Pages visited, time spent on pages, links clicked, and navigation paths.
- Device Information: Browser type, operating system, IP address, and device identifiers.
- Cookies and Similar Technologies: We use cookies and localStorage to enhance your browsing experience, remember your preferences, and analyze website usage. See Section 7 for details about cookies.
1.3 Information from Third Parties
We may receive information about you from third parties such as payment processors, educational institutions (for school programs), or research institutions (for fellowship applications).
2. How We Use Your Information
We use your personal information for the following purposes:
- Service Delivery: To process bookings, provide tours and programs, grant research access, and deliver services you request.
- Communication: To respond to inquiries, send booking confirmations, provide program information, and communicate about your visits or research.
- Payment Processing: To process payments for tickets, memberships, and services.
- Improvement: To analyze usage patterns, improve our website and services, and develop new programs.
- Marketing: To send newsletters, event announcements, and promotional materials (only with your consent, and you may opt out at any time).
- Legal Compliance: To comply with legal obligations, respond to legal requests, and protect our rights and property.
- Safety and Security: To maintain the safety and security of our facility, website, and visitors.
3. Legal Basis for Processing (GDPR)
Under GDPR, we process your personal information based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill our contractual obligations when you book services or purchase tickets.
- Consent: Processing based on your explicit consent, such as for marketing communications.
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving services and maintaining security, provided these interests do not override your rights.
- Legal Obligation: Processing necessary to comply with legal requirements.
4. How We Share Your Information
We do not sell your personal information. We may share your information with:
- Service Providers: Third-party vendors who help us operate our website, process payments, send communications, or provide services (e.g., payment processors, email service providers). These providers are contractually obligated to protect your information.
- Educational Institutions: When coordinating school programs, we may share relevant information with teachers and school administrators.
- Research Partners: When supporting collaborative research, we may share information with partner institutions (only with your consent).
- Legal Authorities: When required by law, court order, or legal process, or to protect our rights, property, or safety.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
5. Data Retention
We retain your personal information only as long as necessary for the purposes described in this policy or as required by law:
- Booking and Transaction Records: 7 years (for accounting and legal compliance)
- Research Applications: Duration of research project plus 5 years
- Marketing Communications: Until you unsubscribe or request deletion
- Website Usage Data: 2 years
- General Inquiries: 3 years
6. Your Rights Under GDPR
If you are in the European Union or European Economic Area, you have the following rights:
- Right of Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete information.
- Right to Erasure: Request deletion of your personal information (subject to legal retention requirements).
- Right to Restriction: Request that we limit how we use your information.
- Right to Data Portability: Request a copy of your information in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time for processing based on consent.
- Right to Lodge a Complaint: File a complaint with the Irish Data Protection Commission or your local supervisory authority.
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
7. Cookies and Tracking Technologies
Our website uses cookies and localStorage to enhance your experience:
- Essential Cookies: Necessary for website functionality (e.g., session management).
- Preference Cookies: Remember your settings and preferences.
- Analytics Cookies: Help us understand how visitors use our website (we do not use third-party analytics).
We specifically use localStorage to store your cookie consent preference (cookieConsent_discovergallmuseum_site). You can control cookies through your browser settings, but disabling cookies may affect website functionality.
8. Contact Form Data
When you submit our contact form, the information is sent via mailto link to [email protected]. The form requires your name, email address, and a message of at least 40 characters. You must accept our Privacy Policy before submitting. This information is used solely to respond to your inquiry and is not shared with third parties except as necessary to provide the requested response.
9. Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and secure storage. However, no internet transmission is completely secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our website and services are not directed to children under 16. We do not knowingly collect personal information from children under 16 without parental consent. If you believe we have collected information from a child under 16, please contact us immediately so we can delete it.
11. International Data Transfers
Your information is primarily stored and processed in Ireland. If we transfer information outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated policy on our website with a new effective date. Significant changes will be communicated through our website or by email. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Gaulish Antiquities Hub
67 Main Street, Wexford, Y35 KX28, Ireland
Email: [email protected]
Phone: +353 53 234 5008
For data protection inquiries, you may also contact the Irish Data Protection Commission at www.dataprotection.ie.
Last updated: November 2024