1. Who we are:

We are Annie Egan & Company Solicitors of 1st Floor, 61 Lower Kilmacud Road, Stillorgan, County Dublin. You can contact us at this address by post or by email at info@annieegansolicitors.ie

Our data protection representative is Annie Egan, Principal Solicitor who can be contacted at aegan@annieegansolicitors.ie

2. Why we process your data, the lawful basis for processing your data and who we share it with

A. For people who view and interact with our website, we process data:

• to respond to your query when sent through our ‘contact us’ form
• to sign up to our newsletter when you request subscription through our website
• to provide you with legal services in the event you become a Client of Annie Egan & Company Solicitors. While much of the information will relate specifically to the type(s) of legal services we provide to you, we will also use information as part of our administrative, financial and operational processes. This information may include your contact details, payment and financial information, marketing profiles, including what events and communications we think you might be interested in, and client relationship management and feedback information, in addition to the information you give us so we can provide legal services to you.

The legal basis for this processing is our legitimate interest in the administration and operation of our legal services as well as our legitimate interest in marketing and promoting our firm’s legal services. We always include an unsubscribe button in our communications, so you can opt out of receiving such communications at any time.

We share this data with our client relationship management system provider. They may only process this data for the purpose of providing us with their services, and no other purpose.

We may retain your information for as long as necessary in light of the purposes set out in this Notice, including for the purposes of satisfying any legal, accounting, or reporting requirements and, where required for Annie Egan & Company Solicitors to assert or defend against legal claims, until the end of the relevant retention period or until the claims in question have been settled. We take account of guidelines by the Law Society of Ireland in determining how long to store client files. We also have certain legal obligations to retain certain information for specific periods such as AML information.

In general, we will retain information and documents relating to a matter on which Annie Egan & Company Solicitors has acted for between 6 and 12 years after the matter is completed.

B. For our potential clients, we process data:

• in order to market the services of our firm
• to provide you with legal updates and newsletters to which you have subscribed

The legal basis for the processing of this data is processing necessary for the purpose of the legitimate interests of our firm in promoting our services. We always include an unsubscribe button in our communications, so you can opt out of receiving such communications at any time.

We share information such as your name and email address with our newsletter services provider who sends out our newsletters. This provider is not permitted to use this data other than on our behalf.

We will retain this data for as long as necessary in light of the purposes set out in this Notice, including for the purposes of satisfying any legal, accounting, or reporting requirements and, where required for Annie Egan & Company Solicitors to assert or defend against legal claims, until the end of the relevant retention period or until the claims in question have been settled.

C. For solicitors and barristers that we liaise with on client matters, we process data:

• In order to liaise with you about our client matters

The legal basis for the processing of this data is processing necessary for the purposes of the legitimate interests pursued by our firm in representing our clients.

We share the information you provide with our practice management system in order to store your contact information with our client file. We may also send you emails through our email service provider.

We will retain this data for as long as necessary in light of the purposes set out in this Notice, including for the purposes of satisfying any legal, accounting, or reporting requirements and, where required for Annie Egan & Company Solicitors to assert or defend against legal claims, until the end of the relevant retention period or until the claims in question have been settled.

D. For job applicants to the firm, we process data:

• to recruit new employees
• to ascertain your suitability for a specific role

The legal basis for this processing is processing necessary for the purpose of the legitimate interests of our firm in recruiting new staff. Please see the privacy notice in the job advertisement for further information about how we process applicant data.

We share the information you provide in your application with our contracted recruiter in order to make a shortlist of candidates. This recruiter is not permitted to use this data other than on our behalf. We may also send you emails about your application through our email service provider.

We will retain this data for as long as necessary in light of the purposes set out in this Notice, including for the purposes of satisfying any legal, accounting, or reporting requirements and, where required for Annie Egan & Company Solicitors to assert or defend against legal claims, until the end of the relevant retention period or until the claims in question have been settled.

3. Transfers of data outside the European Economic Area

We may transfer data relating to our Clients to recipients located in countries outside the European Economic Area. Where we transfer the information we shall do so in accordance with EU data Protection laws. The safeguard we have put in place for this transfer is to enter into European Commission approved standard contractual clauses with the provider.

4. Information received from third parties and the source of that data

In the course of providing Services we receive information with various third parties including service providers including but not limited to barristers, experts, mediators, other solicitors, law firms, government agencies, regulators, public and statutory bodies such as Tailte Eireann, the Companies Registration Office, the Registrar of Beneficial Ownerships, couriers. We do so for the legitimate purpose of providing legal services to you as a Client.

5. Your rights relating to personal data

You have the following rights under the GDPR, in certain circumstances and subject to certain exemptions, in relation to your personal data:

• right to access the data – you have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data.

• right to rectification- you have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete.

• right to erasure – you have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten.

• right to restriction of processing or to object to processing – you have the right to request that we no longer process your personal data for particular purposes, or to object to our processing of your personal data for particular purposes.

•. Right to data portability – you have the right to request us to provide you, or a third party, with a copy of your personal data in a structured, commonly used machine readable format.

In order to exercise any of the rights set out above, please contact us at the contact details at the start of this privacy notice.

If we are processing personal data based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing which took place prior to its withdrawal.

If you are unhappy with how we process personal data, we ask you to contact us so that we can rectify the situation.

You may lodge a complaint with a supervisory authority. The Irish supervisory authority is the Data Protection Commission.

6. Requirement to process personal data

You may browse our website without providing us with any personal data and this will not affect your ability to view our website.

If you do not provide us with your information for the purposes described above, we cannot send your our newsletter, respond to your queries sent through our contact us form, liaise with you on client matters, or assess your suitability for a role within our firm.

7. Automated decision-making and profiling

We do not use any personal data for the purpose of automated decision-making or profiling.