- Customer order details
- Customer credit card details
A: Personal Data
Cuala uses the following Personal Data in relation to inquiries made through its website
- eMail Address
- Phone Number
B: Data Controller
The Data Controller is the Cuala Secretary. You can contact the Data Controller by –
Mail Runai, Cuala Hurling, Football and Camogie Club, Hyde Road, Dalkey, Co. Dublin A96 X795
C: Data Disclosure
Your data will be processed by authorised Cuala officials, staff and volunteers.
We do not share your personal details with other parties
D: Payment Data
Cuala facilitates on-line payments for orders placed using a secure third-party payment processor in such a way that Cuala will not have access to your banking details. (See Third Part Suppliers)
E: Data Processing
Cuala processes personal data for orders and transactions using 3rd-party software.
Cuala uses the services of third-party suppliers for implementing these services (See Third Party Suppliers) -section G
F: How Cuala complies with the Rules of Data Protection
- We obtain and process information fairly
Your details are collected on a voluntary “opt-in” basis during which you are alerted to this Privacy Statement.
- We keep data for specified, explicit and lawful purposes
We only keep the minimum data necessary for us to be able to manage requests and bookings.
- We use and disclose it only in ways compatible with these purposes
The use of third party suppliers is reasonable for administrative expediency
Each of the suppliers operate under Terms and Conditions that provide reassurance as to proper data storage and privacy policies (See H: Third Party Suppliers)
- We keep it safe and secure
Access to our data is limited to designated officials, staff and club volunteers on a need to know basis.
- We keep it accurate, complete and up-to-date
- We ensure that it is adequate, relevant and not excessive
Cuala seeks and retains only the minimum amount of personal data needed to facilitate inquiries and purchases on our site. .
- We retain personal data for no longer than is needed for our objectives
Data is deleted
– promptly, on request, where no outstanding payments are due
– within 2 years of final payment being made or of an order being cancelled or completed. This allows for possible follow-up inquiries when preparing annual financial accounts or during financial audits
- We give a copy of personal data to individuals, on request
You may request a copy of the data Cuala holds in relation to you by email/writing the Secretary. We reserve the right to ask an applicant for further information to help identify you. We will respond in no later than 40 days but, in practise, much more promptly. Should any data be out-of-date or inaccurate, we will update it promptly. There is no charge for this facility.
G: Third Party Suppliers
Stripe – for processing customer credit card transactions
Woocommerce – for processing customer orders
Cuala Online shop – STRIPE
All credit card transactions used to purchase products on the Cuala Online shop are handled and processed by STRIPE .
Stripe has been audited by a PCI-certified auditor and is certified to PCI Level 1. This is the most stringent level of certification available in the payments industry.
Cuala does not retain a customers credit card details on its website or server.
H: Transferring Personal data abroad
Cuala does not explicitly seek to store personal data “abroad” but we recognise that our third party suppliers operate globally and may store Cuala data on various servers (consistent with good business recovery practices) and in a range of territories. By purchasing items online, you give consent to your data being retained on third party servers, which may be located outside the European Economic Area.
I: Right to complain to the Data Protection Commissioner
Where you are dissatisfied with the manner in which your personal data is stored or processed, you may make a complaint to the Data Protection Commissioner. The Commissioner will expect that you will have first contacted Cuala to resolve the matter.
The Data Protection Commissioner can be contacted at: Data Protection Commissioner, Canal House, Station Road, Portarlington R32 AP23, Co. Laois.