Privacy and GDPR Compliance policy


The O'Malley Clan Association is committed to protecting and respecting your privacy. We wish to be transparent on how we process your data and show you that we are accountable with the GDPR in relation to not only processing your data but ensuring you understand your rights.

For the purposes of the GDPR the data controller is The O'Malley Clan Association. Our contact details are:

Postal Address:
Unit 11, Abington Enterprise Centre
Murroe, Co Limerick, Ireland
V94 XFD3

Email: omalleyclanireland@gmail.com

When we refer to we/us, we mean The O'Malley Clan Association

Please read this Privacy Notice carefully as this sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Who are we?

Our GDPR Owner can be contacted directly here:

  • Name: Don O'Malley
  • Email address: omalleyclanireland@gmail.com

Our organisation collects personal data in the following ways, if you:

  • request a service from us, for example if you sign up to our mailing list to receive our newsletter.
  • register with or use our website or other online applications, for example if you book event tickets for our annual O'Malley Clan Gathering
  • use our website/apps and it installs cookies or other tracking technologies onto your device.
  • engage with us on social media
  • contact us with a complaint or query;

What information do we collect?

The information we collect about you includes the following:

>   Contact and Identifying information, e.g., name, address, contact details; email, mobile, landline

>   Marketing preferences: we will only send you direct marketing if you explicitly consent.

>   Online information: e.g., information about your visits to our websites;

>   Events information e.g., information about your interest in and attendance at our events, including provision of feedback forms;

>   Social media information (e.g., likes and posts) with our social media presence; this includes X, Instagram, Facebook and TikTok. We may add others from time to time.

When our organisation collects sensitive personal data as defined within the GDPR we will ensure that we require this information, and we have your explicit consent and/or authorisation prior to our collection. Please see the further information contained in this Privacy Notice that outlines special categories of personal data.

Information we automatically collect.

We sometimes automatically collect certain types of information when you visit our websites and through e-mails when we communicate with you. Automated technologies may include the use of web server logs to collect IP addresses, "cookies" and web beacons. Other cookies such as functional cookies, marketing cookies and analytical cookies will only be used with your expressed consent. Further information about our use of cookies can be found in our Cookie Notice at the footer of our web page.https://omalleyclan.ie

How do we use your personal data?

Your Personal Data will be used to enable us to fulfil our contractual obligations in relation to your request for our services (such as our newsletter) or for tickets to our events.

1.   Performing services for our clients and prospective clients – when you book tickets to our events, we use your data to enable us to record your preferences and ensure your access to the events.

2.   Communicating and marketing to you – We use your data to provide selective information about our activities.

3.   Contacting you if required or responding to any communications that you might send to us.

4.   Handling complaints

5.   Notifying you about changes to our service

Legal Basis

We need to ensure that we process your personal data lawfully. We rely on the following legal grounds to collect and use your personal data.

1.   Performance of a contract

When you request a product or service from us, we will collect and use your personal data to enable us to fulfil that request.

2.   Consent

We may rely on your consent to send direct marketing to you. We will ensure that we present this to you concisely. We will also ensure that we use clear and plain language and if you give us your consent you can withdraw this easily at any time.

If you require further information on any of the above basis for processing your data, we can provide you with furtherdetails.


How we share your data

When required, we may make your information available to third parties with whom we have a relationship, where that third party is providing services on our behalf. We will only provide those third parties (data processors) with information that is necessary for them to perform the services. We will take measures to protect your information, such as putting in place Standard Contractual Clauses and confidentiality agreements.

Third-party processors: We outsource our processing operations to suppliers that process personal information on our behalf. Examples include IT service providers who provide ticketing and payment systems, website hosting and direct marketing services.

These processing operations remain under our control and we have data processing agreements in place with all our third party processors to ensure all processing is carried out in accordance with our security standards and the GDPR.

    External auditors where necessary for the conduct of audits or to investigate a complaint or security threat.

    Transferring personal data outside of Ireland

    If we transfer personal data to a country outside of the EEA (referred to in the GDPR as 'third country,') we will ensure it is done lawfully, i.e. there is an appropriate "level of protection for the fundamental rights of the data subjects". We will therefore ensure that either the EU Commission has granted an adequacy decision in respect of the third country, or appropriate specified safeguards have been put in place, (e.g., Binding Corporate Rules (BCRs) or Standard Contractual Clauses (SCCs)).

    We share data with Ticket Tailor located in the UK. The EU Commission adopted adequacy decisions for transfers of personal data to the UK. This means that the EU accepts that the UK data protection regime is substantially equivalent to the EU regime and allows personal data to be transferred freely from the EEA to the UK. Therefore, the UK is not deemed a third country.

    Retention

    The O'Malley Clan Association shall not keep personal data in a form that permits identification of data subjects for a longer period than is necessary.

    The O'Malley Clan Association may store data for longer periods if the personal data will be processed solely for archiving purposes subject to the implementation of appropriate technical and organisational measures to safeguard the rights and freedoms of the data subject.

    Your rights as a data subject

    At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

    • Right of access – you have the right to request a copy of the information that we hold about you.
    • Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
    • Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
    • Right of portability – you have the right to have the data we hold about you transferred to another organisation.
    • Right to object – you have the right to object to certain types of processing such as direct marketing.
    • Right to object to automated processing, including profiling.
    • Right to make a complaint: if we refuse your request under rights of access, we will provide you with a reason as to why.

    Complaints

    If you wish to make a complaint about how your personal data is being processed by The O'Malley Clan Association or how your complaint has been handled, you have the right to lodge a complaint with our GDPR Owner

    You may also lodge a complaint with the Data Protection Commission (DPC) in Ireland, whose details are:

    Data Protection Commission

    21 Fitzwilliam Square South,

    Dublin 2.

    D02RD28

    Web: www.dataprotection.ie

    Email: info@dataprotection.ie

    See website for updated contact details to reach the appropriate section within the DPC.

    Contact Us

    Your privacy is important to us. If you have any comments or questions regarding this statement, please contact us by email omalleyclanireland@gmail.com

    Privacy notice/ statement changes

    When we update this Privacy Notice/Statement, we will post a revised version online. Changes will be effective from the point at which they are posted. We would encourage you to review our Privacy Notice so that you are aware of updates.

    Issued 14 November 2025