Privacy


Privacy


Under Republic of Ireland Law there are 2 forms of privacy documents. A privacy policy and a privacy statement. We are legally obliged to provide you with an easy to read and up to date privacy statment. This is listed below. We are also working to complete a privacy policy following the eight data protection principles listed below.





What is a Privacy Policy ?


A Privacy Policy documents an organisation's application of the eight data protection principles to the manner in which it processes data organisation-wide. The policy applies to all personal data processed by the organisation, including customer data, third party data and employee data.


  1. Obtain and process information fairly.
  2. Keep it only for one or more specified, explicit and lawful purposes.
  3. Use and disclose it only in ways compatible with these purposes.
  4. Keep it safe and secure.
  5. Keep it accurate, complete and up-to-date.
  6. Ensure that it is adequate, relevant and not excessive.
  7. Retain it for no longer than is necessary for the purpose or purposes.
  8. Give a copy of his/her personal data to than individual, on request.

A Privacy Policy is fundamentally a document for internal reference.





What is a Privacy Statement ?


A Privacy Statement is public declaration of how the organisation applies the data protection principles to data processed on its website. It is a more narrowly focused document and by its public nature should be both concise and clear.

Under Republic of Ireland legal requirements, two distinct pieces of legislation apply.

  1. The Data Protection Acts 1988 & 2003
  2. Statutory Instrument Number 535 of 2003 European Communities (Electronic Communications Networks and Services)(Data Protection and Privacy) Regulations 2003 ('SI 535/2003')

Roughly speaking a web site requires a Privacy Statement if the site does any of the following.

  1. Collects personal data (visitors filling in web forms, feedback forms, etc).
  2. Uses cookies or web beacons.
  3. Covertly collects personal data (IP addresses, e-mail addresses.)

The Orlogix website www.orlogix.com does all three.

Please note that the use of the word "Covertly" above does not automaticaly imply any negative behaviour. It effectively means "automatic and in the background without the explicit observation of the visitor". Many such processes occur on a typical PC and some information such as IP address can typically only be collected in this way.

For more info please visit the Republic of Ireland Data Protection Commissioner at http://www.dataprotection.ie/docs/PrivStatements/290.htm