Data Protection, GDPR & AIE
The ERC has a Data Protection Officer (DPO) with overall responsibility for data protection. The DPO is a statutory role that facilitates data subjects with exercising their rights under the GDPR and the Irish Data Protection Act 2018.
Data Protection and the General Data Protection Regulation (GDPR)
Data protection laws, such as the General Data Protection Regulation (GDPR), set out various obligations where personal data is processed by a company or organisation (the Data Controller). These laws also set out rights for data subjects. This has implications for how the ERC works with schools sharing personal data, with individuals and bodies working in the education sector, with Government Departments and with companies that process personal data on our behalf.
The Data Protection Commission (DPC) is responsible for regulating data protection laws. For further information, the Office of the Data Protection Commissioner has established the following website that provides information on GDPR http://gdprandyou.ie/
Data Protection Policies
The ERC’s Privacy Statement contains further information about how the ERC processes personal data. The Privacy Statement can be viewed here.
Cookie Policy – a cookie is a small simple file that is sent along with pages of this website and stored by your browser on the hard drive of your computer or another device. The information stored therein may be returned to our servers or to the servers of the relevant third parties during a subsequent visit. The ERC’s Cookie Policy outlines how we manage cookies on our websites and can be viewed here.
For information on the ERC’s Email Disclaimer, please click here.
ERC Drumcondra Online Testing System
Where a school uses the Drumcondra Online Testing System to administer tests, the ERC holds the role of Data Processor. The Data Processing Addendum, required under the GDPR, along with the DOTS Platform Terms and Conditions of Service, and the DOTS Platform Terms of Use, can be viewed below.
Subject Access Request (SAR)
The GDPR states that individuals (Data Subjects) have the right to access information about their personal data from an organisation.
Note: Students, or parents of students (under the age of 18), requesting information on behalf of their child, are advised to submit their SAR Form via the school where the student is currently attending. This is to help us to protect your data by ensuring that the request for information is coming from the correct person.
Queries
The Data Protection Officer for the ERC is Damian Downes – Head of Governance and Corporate Services. Please address data protection and GDPR queries by:
E-Mail to: Data.Protection@erc.ie
Post to: The Data Protection Officer, The Educational Research Centre, DCU, St. Patrick’s Campus, Drumcondra Road Upper, Dublin D09 AN2F
Telephone: (01) 837 3789
Additional information is also available on the website of the Data Protection Commissioner: https://www.dataprotection.ie/