Privacy Notice

The website operator and data controller for Rural Footprint is [Client legal entity to be confirmed], of [Registered or geographic address to be confirmed].

The controller's legal identity has not yet been confirmed and must be inserted before publication. Rural Footprint is a research programme name and is not stated here to be a registered legal entity. The website-design credit shown in the footer identifies the design supplier only; it does not make that company the operator, publisher, controller or owner of this website or its content.

General enquiries: info@face-ireland.ie.

Privacy and data-protection enquiries: [Privacy contact to be confirmed]. Postal address: [Registered or geographic address to be confirmed]. No data protection officer has been confirmed as appointed.

This notice covers the Rural Footprint website and the interfaces on it: general browsing, the contact form and the survey. It does not cover other organisations' websites that we may link to, or any offline activity of participating associations.

This site is a staging version under review. At present:

• Survey submission is disabled. The questionnaire can be previewed, but answers are not sent to us.
• Contact-form sending is disabled. The form can be completed but the send button is inactive and nothing is transmitted.
• Nothing entered into either interface is currently submitted to Rural Footprint.
• No contact enquiries and no survey responses are currently written to our database or to any mailbox.
• Survey-preview answers are kept only in your own browser's local storage on your device, so you can continue where you left off. Clearing your browser data removes them.

Sections 5 to 9 also describe how processing is intended to work once the live service is switched on. Those forward-looking details are marked for client review and are not yet in effect.

Technical website and access-log data. When you visit any page, our hosting and content-delivery providers automatically process technical information needed to serve the page and to keep the service secure and available. This typically includes your IP address, the date and time of the request, the page requested, HTTP status, referrer and browser user-agent string.

Contact enquiries (not yet active). When the contact form is enabled, it will process the enquiry type, your name, email address, optional organisation, subject and message. An enquiry will be emailed to us; it will not be written to our database.

Survey participation (not yet active). The live survey will process the answers you give. The questionnaire does not ask for your name or contact details. Where you are asked for optional contact details for follow-up, those details are held separately from your research answers.

Club codes, contact records and communications preferences. The survey design includes a club code for committee respondents, so that committee answers can be grouped at club level. Whether contact records and communications preferences will be used in the live service, and on what terms, is [Awaiting client confirmation]. They are not in use now.

We do not claim that survey answers are anonymous. Until the complete technical design is finalised and reviewed, they are treated as personal data that may be capable of being associated with an individual, a club code or another identifier.

The lawful basis for each purpose is still to be confirmed with the client's legal advisers and is not stated here as settled.

• Delivering and securing the website (server and access logs, abuse prevention) — [Lawful basis awaiting client and legal confirmation]
• Responding to enquiries (once enabled) — [Lawful basis awaiting client and legal confirmation]
• Conducting the research and publishing aggregated findings (once enabled) — [Lawful basis awaiting client and legal confirmation]
• Optional follow-up contact with participants (once enabled) — [Lawful basis awaiting client and legal confirmation]

The questionnaire is not designed to collect special-category data (such as health, racial or ethnic origin, political opinions, religious beliefs or trade-union membership). Free text boxes could allow a respondent to volunteer such information unprompted. Whether any question is treated as special-category data, and the additional condition relied on if so, is [Awaiting client and legal confirmation]. Please do not include sensitive personal information in free-text fields.

We do not sell personal data and we do not share it for advertising. Service providers used to run this website act on our instructions:

• Technical information may be processed by organisations that provide website hosting, infrastructure, security and content-delivery services on our behalf, including the creation of server and access logs.
• A database and backend service provider supports the survey and administrative functions. No public visitor data is written to it at present.
• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — serves the two website typefaces. Requesting a font file discloses your IP address and browser information to that provider.
• An email delivery provider will be used for contact enquiries once sending is enabled.

The full and final processor list, and the written processing terms with each, are [Full processor list to be confirmed]. The production website will be set up in its final hosting environment before launch, and this notice will be reviewed and updated from the verified production configuration at that point.

Personal data may also be disclosed where we are legally required to do so, or to professional advisers where necessary.

Some providers may process data outside the European Economic Area. The hosting regions in use and the transfer safeguards relied on (for example, EU Standard Contractual Clauses or an adequacy decision) are [International transfer position and safeguards to be confirmed]. We make no claim about where data is stored, or that transfers do not occur, until this has been verified from the completed production deployment and the applicable contracts. This notice and the Cookie Policy will be reviewed and updated from that verified configuration before launch.

Retention periods have not yet been approved:

• Server and access logs — [Retention period awaiting approval]
• Contact enquiries — [Retention period awaiting approval]
• Survey responses — [Retention period awaiting approval]
• Optional contact records and preferences — [Retention period awaiting approval]

Survey-preview answers stored in your browser during this staging phase stay on your device until you clear your browser storage. We cannot see them.

The site is served over HTTPS. Access to the backend platform is restricted to authorised accounts, and administrative areas are protected. No online service can be guaranteed to be completely secure; the detailed security measures relied on for the live service are [Awaiting client confirmation].

Browsing the site does not require you to give us anything, although technical log data is created automatically as part of serving the page. Taking part in the survey and sending an enquiry are entirely voluntary. Within the live survey, some questions may be required in order to submit a response; contact details for follow-up are always optional.

We do not carry out automated decision-making that produces legal or similarly significant effects, and we do not profile visitors for advertising.

The website is intended for adults. The minimum age for taking part in the survey, and how it will be handled where younger participants are involved in rural activities, is [Minimum participation age to be confirmed]. This must be confirmed before the survey goes live.

Under the GDPR you have the right to:

• be informed about how your data is used;
• request access to a copy of your personal data;
• have inaccurate data corrected;
• request erasure in certain circumstances;
• request restriction of processing;
• object to processing in certain circumstances;
• data portability where applicable;
• withdraw consent at any time, where processing relies on consent.

Some rights may be limited where data has been aggregated or can no longer be linked to you.

To exercise any right, contact [Privacy contact to be confirmed]. We aim to respond within one month. We may need to verify your identity first.

You may also complain to the Irish Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 — dataprotection.ie.

We will update this notice when the service or the processing changes — in particular when survey submission and contact-form sending are enabled. The effective date is shown as the last-updated date on this page. This draft has no effective date until it is approved.

See also our Cookie Policy.