本页内容
- About us and our service
- What personal data do we collect?
- How and why do we use your data?
- What about posts in the Community?
- Do we use cookies or other identifiers?
- How we personalise our marketing messages for you
- What data protection rights do you have?
- Who do we share your data with?
- What international transfers with your data do we make?
- What about linked services, third party websites and content?
- How we protect your data?
- How long do we keep your data?
- Changes to this policy
- How to contact us?
如要了解关于您数据的更多信息:
1.关于我们和我们的服务
我们是爱尔兰旅游担保责任有限公司(“我们”、“我们的”、“爱尔兰旅游局”),主要营业地点位于:4th Floor Bishop's Square, Redmond's Hill, Dublin, D02 TD99, Ireland。本隐私政策(以下简称"政策")适用于本网站、www.ireland.com(以下简称"网站")以及我们组织或赞助的现场活动所处理的所有信息。
您的隐私对我们至关重要。本政策适用于本网站、与之相关的应用和服务以及我们的现场活动(以下简称"服务")。本政策旨在保护您,也就是我们的用户,为此我们会告知您我们会收集哪些个人数据,我们会如何使用您的相关信息,我们会和谁分享这些信息,我们保留这些数据的时长,以及对我们使用您的个人数据存在疑问或担心时您如何联系我们。您必须同意本政策方可使用本网站及任何相关微型网站。
在本政策中,"个人数据"系指与有生命个体有关的数据,从这些数据或将这些数据与我们掌握的、可能掌握的或拥有的其他信息结合起来,能够或可以识别该个体,还包括《数据保护法》(定义见下文)中所述的个人数据。
我们出于本政策所述目的向您收集或处理的任何个人数据在下文中统称为"您的数据"。您的数据独立于用户上传数据(定义见下文),应加以区分。
我们依据《数据保护法》处理您的数据。"数据保护法"指《通用数据保护条例》(欧盟)2016/679(以下简称"GDPR"),以及与个人数据处理和电子通信隐私相关的任何其他适用法律或法规,如1988年至2018年《数据保护法案》和爱尔兰2011年《欧洲共同体(电子通信网络和服务)(隐私和电子通信)条例》(及不定期修订与替换)。在我们向英国用户提供服务时,《数据保护法》还包括与英国个人数据处理和电子通信隐私相关的法律法规,其中包含适用于英国的GDPR(以下简称“UKGDPR”)。
如《数据保护法》所定义,对于我们通过您或任何其他用户使用服务以及您在我们网站上设置任何账户而从您那里收集的任何个人数据,我们属于数据控制方。本政策规定了我们处理任何该等个人数据的依据。
您可能属于数据主体(如《数据保护法》所定义),也可能为数据控制方。如果您是其他数据主体的个人数据控制方,您必须遵守《数据保护法》规定的控制方的所有义务。如果您是数据控制方,则我们与您分别为独立控制方,另有约定的情形除外。
2.我们收集哪些个人数据?
我们完全尊重您在与本服务互动方面的相关隐私权,并在与您的互动中就我们将要收集的信息以及如何使用您的信息努力做到坦诚透明。此外,我们仅在合法有权的情况下收集和使用个人信息。有关爱尔兰实体收集的个人数据信息,请访问爱尔兰数据保护委员会的网站 www.dataprotection.ie 。
简言之,我们的职责在于帮助您更加方便地找到适合自己的爱尔兰旅游产品或服务,因此个人信息的收集是有限的且始终遵循自愿原则。作为本网站的用户,您可以选择接收我们发送的信息,这种情况下我们需要您提供某些个人数据。这包括您的姓名和电子邮件地址;如果您要求我们邮寄介绍册,则我们也可能要求您提供邮寄地址。任何情况下,您都可以确信我们仅会要求您提供最为基本的必要个人详情,以便及时向您告知您所请求的信息。网站使用信息通过cookie收集(参见下文“5.爱尔兰旅游局是否使用Cookie或其他标识符?” 不分以及我们的Cookie政策)。
在您使用我们的服务时,我们会从您那里收集以下信息或关于您的信息:
Account Information | information such as your first and last name (including prefix or title), username and password, feedback, competitions and survey responses and your personal interests which you choose to provide, and information to verify your identity or age where necessary, e.g. date of birth, and information about the Service we provide to you. |
Contact Information | information such as your home and/or business postal address, email address and phone number(s) and any other address information required to place brochure orders. |
Cookie Data | data collected on your interaction with sites and mobile apps, including this Website, from cookies and similar tracking technologies (such as pixels, web beacons and social plugins) which collect user data, such as clicks, language and login preferences, device specifications, location and search history. Please see our Cookies Policy for further information on cookies and other identifiers and how we use them. |
Image Data | photographs or film footage that have been taken of you by our photographers or third party photographers on behalf of Tourism Ireland if you are attending an event or similar function. |
Location Data | data relating to your location (including real-time geographic location of your device) through your IP address, GPS, Bluetooth signals, nearby Wi-Fi access points, hotspot or telephone masts, if you use location-based features and turn on the location service settings on your device. |
Marketing Data | information about you processed by our machine learning model (a computer programme that uses automated processing of data) to recognise patterns and make predictions based on your location and your interaction with our Website, our advertising on other sites and our newsletters (such as your browsing behaviour and when you tend to open newsletters), and also other websites that we do not own. |
Newsletter Information | information provided by you when you opt-in to receive our newsletter. |
Social Media Data | your handle, name, email address used to sign up from a social media account and other content from your profile that you make publicly available or send or receive through your social media account. |
Technical Information | information from your visits to our Website (including internet protocol (IP) and login data, browser or client application information, language preference, operating system and application version, device type and ID, and device model and manufacturer, and other technology on the devices you use to access the Website or in relation to materials and communications we send to you electronically. |
Other Information | information relating to you which you choose to provide to us in the course of the provision of the Service or otherwise such as User Uploaded Data (as defined below). |
爱尔兰旅游局可能会不时征求用户反馈(文字评论、质量评分或类似内容),以协助分析本网站的质量和表现。为此目的收集的信息将保持匿名,并且仅用于协助我们了解客户需求和观点。我们偶尔会突出显示个人的具体引文,但不会透露用户的个人身份。
我们努力确保您的数据准确无误且及时更新。因此,该等信息如有任何变更,您须尽快告知我们。您在我们给您发送的任何直接营销电子通讯中点击“取消订阅”,即可更改您关于接收我们直接营销资讯与否的兴趣选项。
为移动设备开发的与网站相关的应用程序将按照上述规定运行和捕获信息,并受本政策约束。由我们开发但部署在社交媒体渠道等其他平台上的应用程序可能会向我们提供某特定用户的活动和使用情况反馈。
我们的网站并非针对儿童而设计,我们不会有意收集与儿童有关的个人数据。如果您不满18周岁,请在向我们提供您的数据/使用服务之前获取您父母/监护人的许可。如果我们收到通知或认为我们获得了任何18岁以下人士的个人数据,我们将尽合理努力从我们的记录中删除此类个人数据。我们保留在我们认为适当的情况下要求核实您年龄的权利。
3.我们如何以及为何使用您的数据?
根据《数据保护法》,我们仅为特定用途且在基于以下一项或多项法律依据的情况下使用您的个人数据:
(a) 在您同意的情况下;
(b) 履行与您签订的合同;
(c) 履行我们的法律和监管义务;
(d) 保护个人的重要利益;
(e) 执行我们负责的公共利益任务或行使官方权力;(f) 出于我们或第三方的合法利益(除非您的权利和利益优先于我们的合法利益)。
“合法利益"系指我们有业务或商业理由使用您的数据,例如,我们向您提供服务的业务目的。我们会对合法权益进行评估,以平衡我们的利益与您的权利与利益。您可以联系我们,了解有关我们的合法利益和上述评估的更多信息(参见下文”14.如何联系我们?” )。
我们在下文中以表格形式列出了我们计划使用您的数据的所有方式,以及我们这样做的法律依据。我们还在适当情况下明确指出了我们的合法利益。
取决于我们使用您的数据的具体用途,我们有时会根据不止一项法律依据来处理您的数据。请联系我们(参见下文14.如何联系我们?),以了解下表所列不止一项法律依据时我们处理您数据所遵循的具体法律依据的更多信息。
我们在以下活动中使用您的数据:
使用我们的服务(包括网站、"我的爱尔兰"账户或我们的社区)
Purpose | Categories of data | Legal basis for processing and, where relevant, the basis of legitimate interests |
---|---|---|
To respond to an enquiry from you. | Account Information Contact Information |
Necessary for our legitimate interests (to respond to your enquiry at your request). |
To register you as a user of our Service (such as your My Ireland Account, our competitions or Community on our Website) through social networks. | Account Information Contact Information Social Media Data |
Necessary for the performance of a contract with you. |
To contact you for administration reasons related to the Service (e.g. to provide you with password reminders or to notify you that a particular service, activity or online content has been suspended for maintenance, or in response to a question that you ask us). | Account Information Contact Information |
Depending on the circumstances: - Necessary for our legitimate interests (to provide you with administrative and security updates for using our Service and Website). - Necessary for the performance of a contract with you. |
To provide our Community discussion forum and modify or moderate contents therein in line with our Terms of Use, this Policy and in order to prevent misuse of the Service. | Account Information | Necessary for our legitimate interests (to deliver our Service). |
Purpose |
---|
To respond to an enquiry from you. |
To register you as a user of our Service (such as your My Ireland Account, our competitions or Community on our Website) through social networks. |
To contact you for administration reasons related to the Service (e.g. to provide you with password reminders or to notify you that a particular service, activity or online content has been suspended for maintenance, or in response to a question that you ask us). |
To provide our Community discussion forum and modify or moderate contents therein in line with our Terms of Use, this Policy and in order to prevent misuse of the Service. |
Categories of data |
---|
Account Information Contact Information |
Account Information Contact Information Social Media Data |
Account Information Contact Information |
Account Information |
Legal basis for processing and, where relevant, the basis of legitimate interests |
---|
Necessary for our legitimate interests (to respond to your enquiry at your request). |
Necessary for the performance of a contract with you. |
Depending on the circumstances: - Necessary for our legitimate interests (to provide you with administrative and security updates for using our Service and Website). - Necessary for the performance of a contract with you. |
Necessary for our legitimate interests (to deliver our Service). |
调查、活动、社交联系和我们的现场活动
Purpose | Categories of data | Legal basis for processing and, where relevant, the basis of legitimate interests |
---|---|---|
To publicise Tourism Ireland’s activities through our media channels, including social media through photographing/filming event or similar function. | Image Data | Necessary for our legitimate interests (to promote our business) In such instances, Tourism Ireland will, where possible, minimise any potential risk by making clear that photography will be taking place, either verbally or visually, thereby allowing attendees the opportunity of making it known that they do not wish to be photographed. |
To enable you to enter our competitions or complete a survey. | Account Information Contact Information |
Depending on the circumstances: - Necessary for the performance of a contract. - Where you have given your consent (to Your Data being shared with our partners where competitions or surveys are jointly run by us and our partners). |
Purpose |
---|
To publicise Tourism Ireland’s activities through our media channels, including social media through photographing/filming event or similar function. |
To enable you to enter our competitions or complete a survey. |
Categories of data |
---|
Image Data |
Account Information Contact Information |
Legal basis for processing and, where relevant, the basis of legitimate interests |
---|
Necessary for our legitimate interests (to promote our business) In such instances, Tourism Ireland will, where possible, minimise any potential risk by making clear that photography will be taking place, either verbally or visually, thereby allowing attendees the opportunity of making it known that they do not wish to be photographed. |
Depending on the circumstances: - Necessary for the performance of a contract. - Where you have given your consent (to Your Data being shared with our partners where competitions or surveys are jointly run by us and our partners). |
根据您的偏好和兴趣向您提供我们的介绍册、新闻通讯和其他营销信息
有关我们个性化营销通讯资料的更多信息,请参阅下文“6.营销和广告有哪些?”。
Purpose | Categories of data | Legal basis for processing and, where relevant, the basis of legitimate interests |
---|---|---|
To send you our brochure by post where requested by you. | Contact Information | Depending on the circumstances: - Your consent where you have requested to receive our brochure. - Necessary for the performance of a contract with you. |
To register you to receive, and send you by email, our newsletters. | Account Information Contact Information |
Your consent to receive our newsletters. |
To provide you personalised content in our Website, newsletter and advertising based on a profile drawn from your location and your previous interactions with our Website, our newsletters or advertising. | Account Information Contact Information Cookie Data Location Data Marketing Data Newsletter Information Technical Information |
Your consent: - as given through the ‘Manage Cookies’ - Please see our Cookies Policy for further information cookies and other identifiers and how we use them. - to receive our newsletters. - to advertising and marketing cookies on other sites which show you our advertising. |
Purpose |
---|
To send you our brochure by post where requested by you. |
To register you to receive, and send you by email, our newsletters. |
To provide you personalised content in our Website, newsletter and advertising based on a profile drawn from your location and your previous interactions with our Website, our newsletters or advertising. |
Categories of data |
---|
Contact Information |
Account Information Contact Information |
Account Information Contact Information Cookie Data Location Data Marketing Data Newsletter Information Technical Information |
Legal basis for processing and, where relevant, the basis of legitimate interests |
---|
Depending on the circumstances: - Your consent where you have requested to receive our brochure. - Necessary for the performance of a contract with you. |
Your consent to receive our newsletters. |
Your consent: - as given through the ‘Manage Cookies’ - Please see our Cookies Policy for further information cookies and other identifiers and how we use them. - to receive our newsletters. - to advertising and marketing cookies on other sites which show you our advertising. |
管理和保护我们的业务(包括提供网站和服务)
Purpose | Categories of data | Legal basis for processing and, where relevant, the basis of legitimate interests |
---|---|---|
To administer, maintain the security of, and protect our business and this Website (including troubleshooting, detection of fraudulent or disruptive use of the Website, fixing errors, data analysis, testing, monitoring our technology tools and services, system maintenance, support, reporting and hosting of data). | Account Information Contact Information Newsletter Information Technical Information |
Necessary for our legitimate interests (for running our business, provision of administration, IT services and Website security). |
To maintain the performance of and develop this Website and Service (including auditing and monitoring its use and functionality, providing and improving our Service to you and managing and administering our relationship with you). | Account Information Contact Information Cookie Data Marketing Information Technical Information Location Data |
Necessary for our legitimate interests (to maintain, deliver and improve our Website). |
To meet or enforce legal rights or defend or undertake legal proceedings. | Account information Contact Information Marketing Information Technical Information Location Data |
Depending on the circumstances: - to comply with our legal and regulatory obligations - in other cases, for our legitimate interests, such as protecting our business, rights and interests or those of another party |
Anonymisation for statistical/research purposes. To fully de-identify Personal Data through anonymisation for use by us for statistical and research purposes and to enhance our business model and in line with the principles of data minimisation. Once the anonymisation process is completed by us or our third party service providers who process your Personal Data as set out in this Policy, it is no longer Personal Data and Data Protection Laws do not apply to it. |
Any Personal Data held by us pursuant to this Policy | Depending on the circumstances: - for our legitimate interests, such as protecting our business, rights and interests or those of another party, including data subjects - where compatible with the purposes for which the Personal Data was first collected. |
Purpose |
---|
To administer, maintain the security of, and protect our business and this Website (including troubleshooting, detection of fraudulent or disruptive use of the Website, fixing errors, data analysis, testing, monitoring our technology tools and services, system maintenance, support, reporting and hosting of data). |
To maintain the performance of and develop this Website and Service (including auditing and monitoring its use and functionality, providing and improving our Service to you and managing and administering our relationship with you). |
To meet or enforce legal rights or defend or undertake legal proceedings. |
Anonymisation for statistical/research purposes. To fully de-identify Personal Data through anonymisation for use by us for statistical and research purposes and to enhance our business model and in line with the principles of data minimisation. Once the anonymisation process is completed by us or our third party service providers who process your Personal Data as set out in this Policy, it is no longer Personal Data and Data Protection Laws do not apply to it. |
Categories of data |
---|
Account Information Contact Information Newsletter Information Technical Information |
Account Information Contact Information Cookie Data Marketing Information Technical Information Location Data |
Account information Contact Information Marketing Information Technical Information Location Data |
Any Personal Data held by us pursuant to this Policy |
Legal basis for processing and, where relevant, the basis of legitimate interests |
---|
Necessary for our legitimate interests (for running our business, provision of administration, IT services and Website security). |
Necessary for our legitimate interests (to maintain, deliver and improve our Website). |
Depending on the circumstances: - to comply with our legal and regulatory obligations - in other cases, for our legitimate interests, such as protecting our business, rights and interests or those of another party |
Depending on the circumstances: - for our legitimate interests, such as protecting our business, rights and interests or those of another party, including data subjects - where compatible with the purposes for which the Personal Data was first collected. |
4.关于社区中帖子的政策如何?
您的数据独立于用户上传数据,并应加以区分。“用户上传数据”系指您或其他人上传的数据,例如:(i) 通过您在我们社区的账户或对我们服务的其他使用而上传的数据,或 (ii) 在社交媒体上传的关于我们或我们服务的数据。我们强烈建议您避免在任何用户上传数据中上传任何个人数据。我们保留查看、编辑或删除用户上传数据的独家权利。我们也会调整所有用户上传数据,以确保其不包含个人数据。尽管如此,就用户上传数据(在包含个人数据的情形下)而言,我们是处理方,而控制方则是您自己。
如果您是用户上传数据中包含的其他数据主体的任何个人数据控制方,那么您必须遵守《数据保护法》规定的控制方在这方面的所有义务。我们强烈建议您避免在任何用户上传数据中上传其他数据主体的任何个人数据。
如果您的数据(包括用户上传数据)包含任何可能被合理视为具有攻击性、不适当或令人反感的材料,或以其他方式从事与服务有关的任何破坏性行为,我们可能会删除此类内容和/或暂停您的账户使用。我们还可能从本网站、任何微型网站和我们的任何社交媒体页面上删除任何此类材料。
如果我们有理由认为您正在或可能正在违反任何适用法律,例如有关仇恨言论、隐私、在线安全、诽谤或知识产权的法律,我们可能会向相关第三方披露您的数据,包括披露给执法机构或您的互联网提供商。只有在适用法律(包括《数据保护法》)允许披露的情况下,我们才会这样做。
5.我们是否使用Cookie或其他标识符?
我们的网站和促销电子邮件使用某些cookie、像素和其他标识符。请参阅我们的 Cookie政策,了解有关这些cookie和其他标识符的更多信息以及我们使用它们的原因。
6.我们如何为您提供个性化的营销资讯
我们的核心目标是促进爱尔兰岛旅游业的发展。因此,为您提供与您兴趣相关的有关爱尔兰岛度假目的地的内容和体验对我们来说非常重要。
为此,在您同意接受下述个性化广告和其他营销信息的前提下,我们根据您对我们网站、广告和新闻通讯的参与情况以及您所在的国家/地区,向您提供与您参观爱尔兰岛的兴趣相关的个性化广告和其他营销咨询(如我们的竞争对手或调查)。
有关这些数据以及我们如何收集这些数据的更多信息,请参阅上文2. 我们收集哪些个人数据?中的“营销数据”。
如果您通过"我的爱尔兰"进行了注册,您可以通过"我的爱尔兰"注册随时更新您的兴趣爱好,这样就可以为您提供更准确的内容服务。另请参阅我们的 cookie政策,进一步了解我们使用的cookie和其他标识符(包括第一方和第三方cookie),以及如何选择退出和删除它们。
有关我们如何在营销和广告活动中使用您的数据、处理数据的目的以及我们所遵循的法律依据的更多信息,请参阅上文3.我们如何以及为何使用您的数据?中的“根据您的偏好和兴趣向您提供我们的介绍册、新闻通讯和其他营销信息”。
7.您有哪些数据保护权利?
作为数据主体,根据《数据保护法》,您享有以下权利,而我们作为您的数据控制方,将遵守您在数据方面的这些权利:
- 关于您的个人数据的访问权;
- 有权更新或更正您的数据中的任何错误;
- 删除权(被遗忘权);
- 有权反对我们将您的数据用于直接营销或执行公共利益或我们合法利益(包括分析)目的之任务;
- 与自动化决策相关的权利;
- 有权限制或阻止处理您的数据;
- 有权将您的数据转给另一个数据控制方;
- 撤销同意的权利;以及
- 有权向数据保护监管机构投诉。
您可享有的权利取决于我们处理您的数据的原因。下文将详细解释这些权利,但如果您对我们使用您的数据有任何意见、疑虑或投诉,或者如果您想行使您的任何权利,请联系我们(参见下文“14.如何联系我们?” )。如果通过电话、邮寄或电子邮件与我们联系以行使您的权利,请
- 提供足够的信息,以便我们识别您的身份(如姓名和电子邮件地址);以及
- 请告知我们您希望行使的权利以及您的请求所涉及的个人数据。
我们将在收到您请求后的一个月内对您行使的任何权利做出答复,除非该请求特别复杂或繁琐,这种情况下,我们将在三个月内做出答复(如果我们的答复时间超过一个月,我们会在第一个月内通知您)。如果《数据保护法》要求我们在特定时间范围内做出答复,我们将在该时间范围内做出答复。
You may ask to see what Personal Data we hold about you and be provided with:
- a summary of such Personal Data and the categories of Personal Data held (see ‘2. What Personal Data does Tourism Ireland collect?’ and ‘3. How and Why do we use Your Data?‘ above);
- details of the purpose for which it is being or is to be processed (see ‘3. How and Why do we use Your Data?‘ above);
- details of the recipients or classes of recipients to whom it is or may be disclosed, including if they are overseas and what protections are used for those oversea transfers (see ‘8. Who do we share Your Data with? ’ below);
- details of the period for which it is held or the criteria we use to determine how long it is held (see ’12. How long do we keep Your Data?’ below);
- details of your rights, including the rights to rectification, erasure, restriction or objection to the processing (set out in this ‘7. What Data Protection Rights do you have?’);
- any information available about the source of that data (see ‘2. What Personal Data does Tourism Ireland collect?‘ above);
- whether or not we carry out automated decision-making, or profiling, and where we do, information about the logic involved and the envisaged outcome or consequences of that decision making or profiling (see ‘7.7 Your rights in relation to automated decision-making, including profiling’ below); and
- where Your Data are transferred out of the EEA, what safeguards are in place (see ’9. What international transfers do we make with Your Data?’ below).
Details in respect of the above points are all set out in this Policy; however, if you need further clarification, please contact us (see ‘14. How to contact us?’ below).
Requests for Your Data should be made to us (see ‘14. How to contact us?’ below) specifying what Personal Data you need access to, and we may keep a copy of such request for our legitimate interests in managing the Service. To help us find the information easily, please give us as much information as possible about the type of information you would like to see. If, to comply with your request, we would have to disclose information relating to or identifying another person, we may need to obtain the consent of that person, if possible. If we cannot obtain consent, we may need to withhold that information or edit the data to remove the identity of that person, if possible.
There are certain types of data which we are not obliged to disclose to you, which include Personal Data which records our intentions in relation to any negotiations with you where disclosure would be likely to prejudice those negotiations. We are also entitled to refuse a data access request from you where (i) such request is manifestly unfounded or excessive, in particular because of its repetitive character (in this case, if we decide to provide you with the Personal Data requested, we may charge you a reasonable fee to account for administrative costs of doing so), or (ii) we are entitled to do so pursuant to Data Protection Law.
You can require us to correct any mistakes in Your Data which we hold free of charge. If you would like to do this, please:
- contact us or our Data Protection Officer (see ‘14. How to contact us?’ below);
- let us have enough information to identify you (e.g. name, registration details); and
- let us know the information that is incorrect and what it should be replaced with.
If we are required to update Your Data, we will inform recipients to whom that Personal Data have been disclosed (if any), unless this proves impossible or has a disproportionate effort.
It is your responsibility that all of the Personal Data provided to us is accurate and complete. If any information you have given us changes, please let us know as soon as possible (see ‘14. How to contact us?’ below).
You can ask us to erase Your Data where:
- you do not believe that we need Your Data in order to process it for the purposes set out in this Policy;
- you have given us your consent to process Your Data, you withdraw that consent and there is no other lawful basis for processing Your Data;
- you object to our processing and we do not have any legal basis for continuing to process Your Data;
- Your Data has been processed unlawfully;
- You Data must be erased to comply with a legal obligation; or
- the Personal Data have to be erased to comply with law.
Where you have requested the erasure of Your Data, we will inform recipients to whom that Personal Data have been disclosed, unless this proves impossible or involves disproportionate effort. We will also inform you about those recipients if you request it. Please note that the right to be forgotten will not apply where processing is necessary for:
- exercising the right of freedom of expression and information;
- compliance with a legal obligation, the performance of a task carried out in the public interest or in the exercise of official authority;
- reasons of public interest in the area of public health;
- archiving purposes in the public interest, scientific or historical research purposes or statistical purposes; or
- establishment, exercise or defence of legal claims.
You have the right to ask us to stop using Your Data:
- at any time where it is being used for direct marketing (including profiling); or
- if we process Your Data (including profiling) because it forms part of our public tasks or is in our legitimate interests. We will comply with your objection unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. We may continue to process Your Data for other purposes that do not relate to performing our public tasks or pursuing our legitimate interests.
If you would like to exercise your right to object to processing Your Data for direct marketing or any other purposes, you can do so by:
- clicking on ‘unsubscribe’ in an email or e-newsletter you receive from us (this will be instantaneous); or
- contacting us (see ‘14. How to contact us?’ below) (this can take up to 5 working days).
We will provide you with information on action taken on a request to stop direct marketing - this may be in the form of a response email confirming that you have ‘unsubscribed’. Unsubscribing from direct marketing does not unsubscribe you from essential electronic communications in respect of the administration of Your Account.
In accordance with Data Protection Law, you may request that we stop processing Your Data temporarily if:
- you do not think that Your Data is accurate (but we may start processing again once we have checked and confirmed that it is accurate);
- the processing is unlawful but you do not want us to erase Your Data;
- we no longer need the Personal Data for our processing; or
- you have objected to processing because you believe that your interests should override the basis upon which we process Your Data.
If you exercise your right to restrict us from processing Your Data, we will continue to process the Personal Data if:
- you consent to such processing;
- the processing is necessary for the exercise or defence of legal claims;
- the processing is necessary for the protection of the rights of other individuals or legal persons; or
- the processing is necessary for public interest reasons.
In accordance with Data Protection Law, you may ask for an electronic copy of Your Data that you have provided to us and which we hold electronically, or for us to provide this directly to another party. This right only applies to Personal Data that you have provided to us – it does not extend to data generated by us. In addition, the right to data portability also only applies where:
- the processing is based on your consent or for the performance of a contract; and
- the processing is carried out by automated means.
You have the right not to be subject to a decision based solely on automated processing and without human intervention where it produces legal effects or significantly affects you unless you have explicitly consented to such processing or where it is required by law, or is necessary for the performance of a contract between you and us.
We do not make any such decisions based on Your Data.
If you have provided us with consent to process Your Data and no longer consent to our processing of Your Data (in respect of any matter referred to in this Policy as requiring your consent). You have the right to right to withdraw your consent at any time. You may request that we cease such processing by:
- where your consent relates to receiving personalised marketing communications from us, you can opt-out of receiving further emails or e-newsletters by clicking ‘unsubscribe’ in the email or e-newsletter you receive from us (this will be instantaneous);
- contacting us (see ‘14. How to contact us?’ below); or
- where your request concerns your consent to cookies, by changing your preferences in ‘Manage Cookies’.
Please note that if you withdraw your consent to such processing, it may not be possible for us to provide all or part of our Service to you. Withdrawing consent will not affect the lawfulness of our use of Your Data in reliance on that consent before it was withdrawn.
If you do not think we have processed Your Data in accordance with this Policy, please contact us in the first instance (see ‘14. How to contact us?’ below). We hope we will be able to resolve any issues you may have. You also have the right to lodge a complaint with:
- if you are in Ireland, the Data Protection Commission in Ireland (www.dataprotection.ie).
- if you are in the UK, the Information Commissioner in the UK (https://ico.org.uk/).
- the supervisory authority under Data Protection Law in the European Economic Area (“EEA”) country of your habitual residence, place of work or alleged infringement of Data Protection Law. For a list of EEA supervisory authorities and their contact details, please see here.
8. 我们与谁共享您的数据?
未经您的同意或除非按照法律要求(本政策规定的情况除外),我们将不会分享您的数据。如果我们涉及企业重组,您的数据将不会转让给任何第三方,除非接收方在您的数据安全方面采取了适当的保障措施。
我们对您个人数据的访问权限进行了限定,仅限必须获得此权限以便运营、开发或改进我们服务的员工、承包商和代理才能访问您的数据。这些接收者受保密义务的约束,如未能履行保密义务,相关接受者可能会受到纪律处分,包括解聘、民事诉讼和/或刑事起诉。
在您同意使用直接营销和定位cookie的情况下,我们与第三方媒体机构和广告网络(如广告商、出版商、社交媒体网络、搜索引擎和代表它们工作的数字内容服务)合作,以提高我们向您建议的营销的相关性。
如果您选择将您的社交媒体帐户链接到本服务,我们将与这些社交媒体网站共享社交媒体数据。
在法律要求的情况下,我们将与爱尔兰警察或其他执法、司法或监管机构共享您的数据。
9.我们对您的数据进行哪些国际传输?
我们有时有必要将您的数据传输(包括传输、存储和远程访问)到欧洲经济区("EEA")或英国以外的国家/地区。欧洲经济区、英国和欧洲经济区以外的其他国家/地区的数据保护法律与《数据保护法》不同,其中一些国家/地区的个人数据保护或隐私权保护水平可能较低。
由于我们的总部设在爱尔兰和英国,我们将把您的数据传输到以下地方:
- 我们在爱尔兰、欧洲经济区其他国家、英国和欧洲经济区以外其他国家/地区的分支机构。
- 我们位于爱尔兰、欧洲经济区其他国家、英国或欧洲经济区以外其他国家的承包商和服务提供商。例如
- 如果您同意我们使用定位cookie,您的数据(与您相关的唯一标识符)将被发送至美国。有关这些接收者的更多信息,请参阅我们的 cookie政策。
- 您访问我们服务的司法管辖区。
除非《数据保护法》另有规定,否则我们只会将您的数据传输到保证有充分或同等数据保护程度的欧洲经济区以外的地区。我们将采取一切合理必要的措施,确保您的数据得到安全处理。将您的数据传输到第三国的保障措施包括
如为依据《通用数据保护条例》传输数据:
(a) 该国受“充分性决定”的约束,这意味着欧盟委员会根据《通用数据保护条例》第 45 条为个人数据提供了充分保护。欧盟委员会目前已作出充分性决定的国家名单参见此处。例如,在向英国和美国传输数据时,我们依赖于充分性决定
(b) 我们与第三方签订适当的合同,其中包含欧盟委员会根据《通用数据保护条例》第 46(2) 条批准的标准合同条款,以及针对传输过程中的任何风险所需的任何补充措施。如需更多详情,请参阅欧盟委员会:欧盟与非欧盟国家之间数据传输的标准合同条款。例如,我们依据标准合同条款将信息传输到以下国家:美国。
(c) 有其他符合《通用数据保护条例》第五章规定的适当保障措施,以及您可行使的权利和有效的法律补救措施。
(d) 适用《通用数据保护条例》第49条允许的特定豁免。
如为依据英国《通用数据保护条例》传输数据:
(a) 该国受充分性法规管辖,这意味着英国政府决定该国可依据英国《通用数据保护条例》第45条提供充分的数据保护。英国目前有相关充分性规定的国家名单参见此处。我们依据充分性规定进行从英国向爱尔兰和其他欧洲经济区成员国的信息传输。
(b) 有符合英国《通用数据保护条例》第46条规定的其他适当保障措施,以及您可行使的权利和有效的法律补救措施。
(c) 适用英国《通用数据保护条例》第49条允许的特定豁免。
您提供给我们的所有信息均保存在我们(或签约第三方)的安全服务器上。如果我们向您提供了(或您选择了)访问本服务任何部分所需的密码,则您有责任确保该等密码的保密性。我们要求您不要与未经授权使用本服务的任何人分享密码。
有关您的数据传输的更多信息,请联系我们(参见下文“14.如何联系我们?” )。
10.有关链接服务、第三方网站和内容的政策如何?
本政策适用于爱尔兰旅游局拥有和运营的网站和服务。我们无法控制可能从本服务链接的网站或应用程序(包括文章、视频或博客)。这些其他网站或应用程序可能会在您的电脑上放置它们自己的cookie或其他文件,收集数据或向您索取个人信息。您确认,我们提供的服务可能让您能够或协助您通过第三方网站访问第三方网站内容,与第三方进行通信,从第三方购买商品和服务,且您进行上述各项活动的风险完全由您自己承担。我们对任何该等第三方网站的内容、相关使用或通信,您与任何该等第三方已完成的任何交易、签订的任何合同,以及任何该等第三方对您个人数据的使用,不作任何陈述或承诺,亦概不承担任何责任或义务。我们不认可也不批准任何第三方网站或通过本服务提供的任何第三方网站内容。我们建议您仔细了解适用于第三方运营的任何网站和/或服务的使用条款和隐私政策。请注意,我们对任何第三方的隐私措施不承担任何责任。
11.我们如何保护您的数据
我们尽最大努力通过采取适当的安全技术来保护用户的隐私。我们遵守严格的安全政策,该政策要求我们始终使用SSL和TLS加密标准对您的数据进行加密。我们的服务器每月进行一次安全补丁,每半年由第三方进行一次漏洞扫描,发现任何风险都会优先采取补救措施。我们对您个人数据的访问权限进行了限定,仅限必须获得此权限以便运营、开发或改进我们服务的员工、承包商和代理才能访问您的数据。对我们系统的访问须遵循行业标准密码规则并采用多重身份验证。
我们确保采取适当的物理和技术安全措施来保护您的数据。当我们外包服务的任何流程时,我们会确保服务提供商采取适当的安全措施。然而,本服务可能包含由第三方拥有和运营网站的超级链接。这些第三方网站均有其各自的隐私政策,包括cookie政策。我们对该等第三方网站的隐私措施不承担任何责任或义务,且您使用该等网站的风险由您自行承担。
我们将实施适当的技术和组织措施来确保达到适当的安全水平,以防范因处理您的数据而产生的风险。特别是,我们将考虑所传输、存储或以其他方式处理的您的数据因意外或非法破坏、丢失、更改、未经授权披露或访问而带来的风险。
我们将在法律要求的情况下,向您和任何适用的监管机构(如数据保护委员会或信息专员办公室)通报影响您数据的可疑数据安全漏洞。
12.我们会将您的数据保留多久?
除非法律要求,否则我们保留您数据的时间不会超过我们收集数据之目的所需的时间。我们会在必要时保留您的数据,以便管理您的服务账户、履行我们的法律义务、解决争议、执行我们的协议、支持业务运营,以及继续开发和改进我们的服务。
在您停止与我们的互动(例如与我们的通讯或网站互动)后,我们一般会将您的数据保留3年。此后,我们会从数据库中删除您的数据。
有关我们保留您数据的期限或我们用于确定保留期限标准的更多信息,请联系我们(参见下文“14.如何联系我们?” )。
有关Cookie和其他标识符存储时间的更多信息,请参阅我们的 Cookie政策。
为维护和发展本网站和服务的性能(包括审计和监控其使用情况,向您提供和改进我们的服务,以及管理我们与您的关系),我们有时会选择保留某些信息,以非个人化或汇总的形式提供有关我们服务使用情况的见解。
13.政策变更
我们可能会不定期自行决定更改本政策。最新修订日期将显示于本政策的顶部。如果您不同意这些更改,请不要继续使用本服务来提交您的数据。如果本政策发生重大变更,我们将通过在本服务中发布显著通告或就此向您发送通知的方式告知于您。未经您的同意,我们不会以本政策考虑范围之外的方式处理您的数据。
14.如何联系我们
如果您需要就本政策中规定的您的任何权利与我们联系,所有此类请求均应以书面方式通过电子邮件发送至 dpo@tourismireland.com 。
如果您对本政策或您的数据有任何疑问,可通过邮寄、电子邮件或电话联系我们和我们的数据保护官,以行使《数据保护法》规定的权利(参见上文"7.您拥有哪些数据保护权利?”),或提出投诉。
我们数据保护官的联系方式为:
- dpo@tourismireland.com
- Tourism Ireland, Beresford House, 2 Beresford Road, Coleraine BT52 1GE, N. Ireland