Legal & Compliance

Privacy Policy

Training ID — how we collect, process, use, and protect your personal data in accordance with GDPR and Irish Data Protection legislation.

1 Introduction

This is the Data Protection Policy for Training ID. The use of "we", "us", "our" means Training ID.

2 Purpose

We at Training ID will always respect your right to have your personal data processed in a safe and secure manner. This Data Protection Privacy Policy will explain our firm commitment to protecting this right.

3 Scope

This policy summarises our offline data processing practices in relation to you when you (as an employee, job seeker, customer, supplier, visitor) interact with us in any way. For information on how we process your personal data via our website, www.trainingid.ie, see our website privacy notice.

4 Who We Are

Training ID is an online platform helping job seekers to link up with employers and training providers in the construction industry. Job seekers can find, apply or express an interest in a job vacancy or training course. Employers, recruiters and training providers working within this industry can advertise their vacancies and training courses.

5 How to Contact Us

We are located at Training ID, Suite A2, No. 1 Charlotte Quay, Limerick, Ireland.

If you have any questions about how we process your personal data, request further information or if you would like to exercise your "access rights" please email us at info@trainingid.ie

Data Protection Commission Complaint Rights

You have the right to make a complaint to the Irish Data Protection Commission if you are unhappy with the way we process your data. The Data Commission's website is www.dataprotection.ie. We would however welcome the opportunity to discuss your complaint with you in the first instance.

Email DPO Directly

6 Data Protection

We take our responsibility to protect your personal data seriously and will not collect any personal data about you without your clear knowledge and permission. Any personal data which you volunteer to us will be treated strictly in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988–2018.

We ensure that all your personal data is processed lawfully, fairly and transparently, is collected for specific, explicit and legitimate purposes only, and not processed in any manner incompatible with those purposes, is kept safe and secure, kept accurate and up to date, is adequate, relevant and not excessive, and is retained for no longer than is necessary for the purposes for which it was obtained.

7 Personal Data

We collect data submitted by you as follows:

Data Subject Category Personal Data Collected
Customer
(Employer, Recruitment Agency, Training Provider)
Identity data: company name & contact name
Contact data: address, email, tel/mobile
Finance data: record of payment
Profile data: description of services, job vacancies, course details
Marketing/communication preferences
Job Seekers / Trainees Identity data: name
Contact data: address, email, tel/mobile number
Profile data: work history, qualifications, skills, courses completed, jobs & courses applied for
Marketing/communication preferences
Human Resources Identity data: name
Contact data: address, email, tel/mobile number
Finance data: bank details, PPSN, salary, benefits, payslip
Recruitment record: details contained in CV including education, qualifications, work history, interview notes
HR record: performance appraisal, grievance & disciplinary record, emergency contact details
Technical data: login data, log file
Suppliers, Service Providers & Data Processors Identity: company name & contact name
Contact data: address, email, tel/mobile number
Finance: bank details, payment record, credit card payment, tax record

8 Purpose of Collecting Your Personal Data

We process personal data under the following headings for the reasons listed.

Suppliers, Service Providers & Data Processors

  • Set up new supplier on accounts system.
  • Pay supplier for service/product.
  • Order products/services.
  • Maintain accounts.

Customer (Employer, Recruitment Agency, Training Provider)

  • Create customer profile on system.
  • Answer queries / questions.
  • Provide information as requested.
  • Deal with customer complaints and process feedback.
  • Accept payment & maintain account.
  • Process marketing/communications preferences (e.g. consent to receive our newsletter).
  • Allow us to communicate with you (e.g. for upcoming events, service notices, product updates or technical alerts).

Job Seekers / Trainees

  • Allow job seekers to set up a profile on system so they can apply for a job/training course.
  • Provide information as requested.
  • Deal with complaints and process feedback.
  • Process marketing/communications preferences (e.g. consent to receive our newsletter).
  • Allow us to communicate with you (e.g. for upcoming events, service notices, product updates or technical alerts).

Website

  • Analyse website functionality (e.g. users' pattern of use, to help us improve, administer and diagnose problems with our server and website).

HR & Recruitment

  • Select candidates for interview.
  • Select successful candidates for the job.
  • Set up new employee record.
  • Carry out performance appraisal.
  • Pay salary, taxes, etc.
  • Contact family member/friend in case of emergency.
  • Process health data of employees so as to comply with health & safety legislation.

Most of the personal data we process will be directly supplied by you. We require certain information from you so that you can avail of our services or where we do business with you. If you do not provide the personal data that we request, it may hinder our ability to manage our business effectively with you.

9 Legal Basis for Processing

We process your personal data based on the following lawful basis:

  • Consent: Processing based on the data subject's consent (e.g. where you as a job seeker create a profile on our website, or where you give us permission to contact you via email).
  • Performance of a Contract: Processing necessary for the performance of a contract (e.g. where you as a supplier provide us with contact details so we can manage your account, or where you as an employer/training provider purchase advertising space on our website, or where we process data in an employment context).
  • Legal Obligation: Processing that is required under applicable law (e.g. payment of taxes for Revenue purposes).
  • Legitimate Interests: Processing necessary for us to pursue our legitimate interests (e.g. where we contact you with service or technical updates to ensure the smooth running of the website).

Where we process special categories of data (e.g. data concerning the health of an employee) we will have an Article 9 GDPR lawful basis to process this data.

10 Your Rights

Under data protection law, data subjects have certain rights. Subject to certain restrictions, set out below, you can exercise these rights in relation to the personal data we process about you.

Right to be Informed
Right of Access
Right to Rectification
Right to Erasure
Right to Data Portability
Right to Object
Right to Restrict Processing
Rights re Automated Decisions

We reserve the right to request you to provide additional information in order to enable us to identify your personal data and/or to verify your identity should we need to do so.

Restriction of data subject rights in certain circumstances

Article 23 of the GDPR allows for data subject rights to be restricted in certain circumstances. In addition, the Data Protection Act 2018 contains certain provisions dealing with the restriction of rights of data subjects.

11 Who We Share Your Information With

We do not share your information with third parties other than those set out in this policy. Depending on the purposes for which we collect your personal data, we may disclose it to the following individuals/organisations, who will then process your personal data only within the framework of the purposes listed above:

Third party data processors

  • Service providers: (e.g. IT support for Training ID, web developer, system developer). In such cases we require all third parties to have appropriate technical and organisational security measures in place to protect your personal data, in line with data protection legislation. We also ensure appropriate contracts and data processing agreements are in place.

Other third parties

  • Legal advisers: where necessary to protect Training ID. We may share information where we reasonably believe it is necessary for legal reasons, to defend our legal rights, to enforce our terms of use, or to protect our rights, property, users, customers, or the safety of any person — for example, if ordered by a court to do so.
  • An Garda Síochána: where we need to comply with court orders, legal procedures, or obligations related to reporting and filing information with authorities.
  • Insurance: we may be required to share your details with our insurers.
  • Change of ownership: in the event Training ID goes through a business transition such as a merger, acquisition, or sale of all or a portion of its assets, your personal data will likely be among the assets transferred. Where such transfers take place, the acquiring organisation may continue to use your personal data as set out in this policy.

12 Where We Store Personal Information

European Economic Area (EEA) Storage

We generally store personal information on secure servers located inside the European Economic Area (EEA).

13 International Transfers

We may need to transfer your data to other third-party service providers in countries outside the EEA. The EEA consists of countries in the European Union, Iceland, Liechtenstein and Norway, which are considered to have equivalent laws when it comes to data protection and privacy.

This kind of data transfer may happen if our service providers are based outside the EEA, or if you use our services while visiting countries outside this area. If we send your data to a country that is not in the EEA, we will ensure appropriate transfer mechanisms are in place, such as:

  • An adequate level of protection for personal data, as approved by the European Commission.
  • Where we use certain service providers, specific contracts (standard contractual clauses) approved by the European Commission, which give personal data the same protection it has in Europe.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

14 How Long We Keep Your Data For

We retain personal data for a range of periods as set out in our Data Retention Schedule.

15 Data Breach Management

Where there is a data breach — including an unauthorised or accidental disclosure of, or access to, personal data, alteration of personal data, or loss of access to or destruction of personal data — we will adhere to our data breach management plan as set out in our Data Breach Policy & Procedure.

16 How Secure Is Your Data

We take our security responsibilities seriously, employing the most appropriate physical and technical measures. We review our security policy regularly.

17 Website & Social Media

If you wish to see how we process personal data via our website www.trainingid.ie and through our social media pages, you can log on to www.trainingid.ie/privacynotice.

18 Marketing / Promotion

We strive to provide you with choices in relation to how you would like us to communicate with you.

As an employer, recruitment agency or training provider operating in the construction industry, you may receive marketing communications from us if you have given us permission to send it, or where you have purchased advertising space on this website. As a job seeker, where you have indicated, we may notify you about jobs and training courses that may be of interest to you.

We do not sell or distribute your personal data to third parties for purposes of allowing them to market products and services to you.

19 Credit Cards

Stripe Payment Gateway Integration

We use the services of Stripe, whereby you can make payments securely through debit or credit card (customers only).

20 Governing Law and Jurisdiction

This notice and all issues regarding this website are governed exclusively by Irish law and are subject to the exclusive jurisdiction of the Irish courts.

21 Document Reviews

This policy will be reviewed and updated annually or more frequently, if necessary, to ensure that any changes are properly reflected in the policy.