Privacy Statement

Introduction

Bord Bia acts as a link between Irish food, drink and horticulture suppliers and existing and potential customers throughout the world. Our objective as a State Agency is to develop markets for Irish suppliers and to bring the taste of Irish food to more tables world-wide.
Bord Bia has developed Bloom as a consumer event which includes the showcasing of Irish horticulture, food and drink.
This Privacy Statement explains the ways in which we collect, store and process your personal data which you may provide to us at the Bloom event and/or through the Bloom website.

2. Bord Bia’s Role

Bord Bia, as the organiser of Bloom, is the Data Controller under the GDPR. The data controller is the organisation that determines how your personal data will be processed and for what purpose. Our contact details are as follows:

Bord Bia Contact Details
Telephone	+353 1 6685155
Email	info@bordbia.ie
Post	Bord Bia, 140 Pembroke Road, Ballsbridge, Dublin 4

3. What personal data does Bord Bia collect and why?

3.1 “Personal data” means any information relating to an identified or identifiable natural person. Personal data can be factual (for example, a name, address or date of birth) or it can be an opinion about that person, their actions and behaviour.

3.2 We set out in Schedule 1 of this Privacy Statement a description of the personal data that we collect in connection with Bloom, why we are collecting this data, our legal basis for processing this data and the length of time for which we retain your data. (The table is referred to below as our “Processing Description”.

3.3 We collect this information from you through:

an online form on the Bloom website;
forms provided at the Bloom event including competitions and surveys where you have given us permission or ‘opted in’ to collect and process your personal data;
or where you have completed and signed a photo/video release form.

4. Lawful Basis

4.1 Bord Bia, as a State Agency, processes personal data under the lawful basis of “Public Task”. Bord Bia was established under legislation (An Bord Bia Act 1994) and processes personal data in the fulfilment of its statutory functions. For some activities that are not part of this such as marketing lists and competitions, Bord Bia will rely upon the lawful basis of consent.

5. Security of your personal data

5.1 The data you provide to us is protected using ISO27001 framework standards which includes Firewalls, encryption, anti-virus software and backup and disaster recovery systems.

5.2 All our staff receive training in data protection and abide by policies which we review regularly with the purpose of ensuring we limit any risk to your data.

5.3 We do not transfer your personal data out of the EEA.

6. How long will we keep your personal data?

6.1 Personal data is only held for as long as is necessary for the purposes of which it was collected for. After this time your personal information is securely destroyed or deleted.

6.2 Our retention periods are shown in Schedule one.

7. Will we share your information with anyone else?

7.1 Bord Bia engages an event management agency to assist with the Bloom event including the marketing, competitions and promotion. The agency processes personal data on behalf of Bord Bia under contract.

7.2Bord Bia engages professional email and digital marketing service providers in order to carry out Bord Bia’s email marketing service. The personal data you provide us, is provided to these third parties for this purpose where you have consented to marketing. Again, they are hired under contract and must abide by the all relevant data protection legislation.

7.3 We also have a specialist website provider employed under contract. Further information regarding what personal data is processed to provide you with this website is detailed in section 8,

7.4 In exceptional cases we may also share your personal data with third parties but only if it is required by law, pursuant to our statutory functions,or in order to comply with a legal obligation or to assist with an investigation by An Garda Síochána,

8. Technical information we collect when you visit our website

8.1 Bord Bia Our website uses cookies to enable us to improve our service to you and to provide certain features that you may find

8.2 Cookies are small text files that are transferred to your device through your web browser. Some cookies are essential in order to run the website. Non-essential cookies are used to help us analyse our website traffic to help improve our services. You may accept or decline these non-essential cookies by updating the banner which appears when you visit our site.

8.3 You also have the ability to set your device’s browser not to accept the essential cookies but then it is likely the website will not load correctly or as you would expect.

8.4 Where you consent, Information in relation to web usage is processed via our internet service provider who records some of the following data. The information we receive depends upon what you do when visiting the Bloom website:

The date and time of every visit to an individual page
Each page visited in the site on such a visit
Your IP/network address
The type of web browser used by the website visitor
The device used by the website visitor

8.5 Please be advised, where you have given consent for cookies to be used you can withdraw that consent at any time.

9. How we may use this technical information

9.1 Where you have given consent for this information to be used, it enables us to improve the information we are supplying to visitors to the website, to find out how many people are visiting our sites and for statistical purposes.

9.2 Some of the above information is used to create summary statistics which enable us to assess the number of visitors to the different sections of our site, discover what information is most and least used, inform us on future design and layout specifications, and help us make our site more user friendly.

9.3 It is our policy never to disclose such technical information about individual website visitors to any third party (apart from our internet service provider, which records such data on our behalf and which is bound by confidentiality provisions in this regard), unless obliged to disclose such information by law. We will only use the technical information for statistical and other administrative purposes.

10. Your data protection rights

10.1 Under Data Protection Law, you have many rights in relation to your personal data and how other people use it. Below we provide a summary of these rights but you can find out more by visiting dataprotection.ie.

10.2 In summary you can contact us to exercise the following rights:

A. Request information about whether we hold personal information about you, and, if so, what that information is and why we are holding/using it.

B. Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you, to check it is accurate and that we are lawfully processing it.

C. Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

D. Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below). This is not an absolute right as we may have to continue processing your data depending on the circumstances, For example, payments for Bloom tickets have to be kept under Revenue’s rules.

E. Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.

F. Object to automated decision-making including profiling, that is not to be subject of any automated decision-making by us using your personal information or profiling of you. To date, Bord Bia does not carry out such automated processing.

G. Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.

H. Request transfer of your personal information in an electronic and structured form to you or to another party (commonly known as a right to “data portability”). This enables you to take your data from us in an electronically useable format and to be able to transfer your data to another party in an electronically useable format.

10.3 To submit a Subject Access Request to see what of your personal data we may be processing, if any, please contact us and we will respond as quickly as we can, and no later than one month after your request unless there is a problem. In this case we will write out to you and explain.

10.4 We may ask you to provide proof of identity but this only to ensure we are not sending your data to someone else.

10.5 When wishing to exercise any of your rights it is most efficient to submit a request in writing to dpo@bordbia.ie. However, you can also ring us or speak to a member of our staff when at an event. We will take your details and may ask for further information to make sure we are providing you with what you need as quickly as possible. Remember our DPO is there to protect your rights and you contact them if you have any queries or concerns.

Bord Bia Data Protection Officer
Telephone	+ 353 (0)51 833 958
Email	dpo@bordbia.ie
Post	Data Protection Officer Bord Bia, 140 Pembroke Road, Ballsbridge, Dublin 4

10.6 If you wish to submit a complaint regarding how your personal data has been processed by Bord Bia, we ask that you contact us in the first instance. However, you also have the right to lodge a complaint with the Data Protection Commission (DPC). We encourage you to visit their website as they provide useful explanations of your rights and our obligations. The contact details for the Commission are as follows:

Data Protection Commission
Telephone	+353 57 8684800 or +353 0761 104 800
Email	info@dataprotection.ie
Post	21 Fitzwilliam Square Dublin 2 D02 RD28 Ireland

11. Changes to the Privacy Statement

Our Privacy Statement may change from time to time and any changes to the statement will be posted on this page.

Schedule 1 – Processing Description

What personal data we take	Purposes of processing	Legal basis for processing	Retention period
First name and surname	So that we can answer queries, include you in Club Bloom if requested and/or personalise our contact with you in relation to our services, including newsletters, research updates, events and programmes, where you have asked for this,	Consent	We will store these details as long as you subscribe to Club Bloom and/or to receive any other email marketing communications from Bord Bia.
Email address	So that we can contact you in relation to the services (including newsletters, research, updates, events and programmes) that you have consented to receive. Please help us by informing us if your email or any other personal data has changed.	Consent	We will store these details as long as you subscribe to Club Bloom and/or to receive any other email marketing communications from Bord Bia.
Mobile number	You are given the option of providing your mobile number on the competition forms. Where you do so, we may use your number to contact you in the event that you win. However, your mobile number will not be retained or used in any other way.	Consent	We do not retain these after the competition has ended. Details on competition forms will be submitted to a database only where you have consented to be contacted but mobile numbers will not be submitted. Competition forms are securely destroyed once the relevant information has been inputted.
Image/voice/ performance	So that we may use images/video/performance footage for advertising and promotional purposes as set out in the document “Photo/video release form”.	Consent	We will store these for the duration of the relevant advertising or promotional campaign, and thereafter for a period of 7 years from the date on which the personal data was last used.