Ballykealey House GDPR Policy
1. Introduction
Ballykealey House (“we,” “us,” “our”) is committed to protecting and respecting your privacy. This policy outlines how we collect, use, store, and protect personal data in accordance with the General Data Protection Regulation (GDPR).
Ballykealey House is the data controller for the purposes of this policy.
2. Data We Collect
We collect and process only the personal data necessary to deliver our services, including:
• Name, address, and contact details (email, phone number)
• Payment and transaction information
• Special requests or dietary requirements
• Communication history with Ballykealey House
• CCTV footage for security purposes
• Online activity data (e.g., IP address, browser type, cookies)
• Booking and reservation details from third-party travel sites (e.g., Booking.com, Expedia)
• Health data (only where necessary, with explicit consent)
• Marketing preferences and guest feedback
We may also collect data from competitions, social media interactions, and advertising partners (e.g., Google Display Network).
3. Purpose of Data Processing
We use your data for the following purposes:
• Managing reservations, weddings, and event bookings
• Providing tailored guest experiences
• Processing payments and issuing invoices
• Sending marketing communications (with consent)
• Fulfilling legal obligations (e.g., tax, security)
• Internal reporting and operational improvements
• Fraud prevention and security monitoring
• Conducting guest feedback surveys and service reviews
4. Legal Basis for Processing
We process personal data on the following legal grounds:
• Contractual necessity: To fulfil a booking or contract
• Legitimate interests: To improve services and ensure guest safety, balanced against your rights
• Legal compliance: To meet regulatory, financial, or tax obligations
• Consent: For marketing or processing sensitive health data
5. Data Sharing and Third Parties
We do not sell or rent your personal data. We may share it with:
• Payment processors to handle transactions
• IT and software providers to manage bookings and communication
• Third-party booking platforms (e.g., Booking.com, Expedia)
• Advertising platforms (Google, Facebook) for remarketing
• Legal or regulatory authorities, if required
• Security firms for CCTV monitoring
All third parties are contractually bound to comply with GDPR and are required to implement strict data protection measures.
6. Data Retention
We retain personal data only as long as necessary:
• Guest records: Up to 7 years (for legal and tax reasons)
• Marketing data: Until you opt out
• CCTV footage: Typically retained for 30 days unless part of an investigation
• Health data: Deleted within 7 days of departure unless you give written consent to retain it
7. Your Rights Under GDPR
You have the right to:
• Access your personal data
• Correct any inaccurate information
• Request data deletion (where legally permissible)
• Restrict processing under specific conditions
• Object to direct marketing
• Request data portability (where applicable)
To exercise any of these rights, email: alison@ballykealeyhouse.com.
You may also lodge a complaint with the Data Protection Commission at www.dataprotection.ie.
8. Security Measures
We implement both technical and organisational safeguards to protect your data, including:
• Secure servers and SSL encryption
• Role-based access control to sensitive data
• Regular staff training and security audits
9. Marketing Communications
We only send promotional emails or newsletters with your consent. These may include:
• Offers, news, or event updates
• Targeted ads based on previous interactions
• Remarketing via Google or social media
• Invitations for guest reviews (shared anonymously if preferred)
You can unsubscribe at any time by clicking the link in our emails or emailing alison@ballykealeyhouse.com with the subject line “Unsubscribe.”
10. Cookies and Website Data
Our website uses cookies to enhance your browsing experience. We may collect:
• IP address, browser type, and clickstream data
• Page views, time on site, and interactions
• Social media engagement
You can manage cookie preferences through your browser settings. For more information, see our Cookie Policy.
11. Data Breach Policy
In the event of a data breach, we will:
1. Assess the nature and scale of the breach
2. Take immediate steps to mitigate the risk
3. Notify the Data Protection Commission within 72 hours if required
4. Inform affected individuals if there is a high risk to their rights or freedoms
12. International Data Transfers
If personal data is transferred outside the European Economic Area (EEA), we ensure:
• Adequacy decisions are in place, or
• EU Standard Contractual Clauses (SCCs) are used to safeguard your data
13. Automated Decision-Making
If we use any automated decision-making or profiling:
• You have the right to request human review
• You may challenge or object to such decisions
• You are entitled to an explanation of the logic involved
14. Contact Us
For any GDPR-related queries, contact:
Data Protection Officer
Ballykealey House, Rosslare Rd, Ballon
Email: alison@ballykealeyhouse.com
Phone: 059-91-59288
15. Policy Updates
We may revise this policy from time to time. Significant changes will be published on our website or communicated via email.
