WebsiteAddress: www.kilfinnyns.ie
Last Updated: 25/11/25
1. Introduction and Scope
Kilfinny National School (“we,” “us,” or “our”) is committed to protecting the privacy of all visitors to our website, www.kilfinnyns.ie. As an Irish primary school, we are dedicated to complying with our obligations under the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the ePrivacy Directive.
This policy outlines how we collect, use, and protect the limited personal data you provide to us when using our website.
2. Data Controller
The Data Controller responsible for the processing of personal data collected through this website is:
The Board of Management,
Kilfinny National School,
Kilfinny, Adare, Co. Limerick, V94 A8P6
3. Personal Data We Collect
We only collect the following minimal personal data directly from you when you voluntarily provide it, typically through a contact or inquiry form:
-
Name
-
Email Address
We do not engage in any other user tracking or collect data such as IP addresses, location data (other than what is necessary for functional purposes, like using Google Maps as described below), or extensive web usage statistics.
4. Purpose and Legal Basis for Processing
We process the personal data listed above for the following purposes, based on the corresponding legal basis under GDPR:
| Purpose of Processing | Personal Data Used | Legal Basis under GDPR |
| Responding to Inquiries | Name, Email Address | Consent (When you fill out a form and submit) or Legitimate Interest (Responding to direct school-related communication). |
| Sending Newsletters/Updates | Name, Email Address | Consent (Where you explicitly opt-in to receive specific communications). |
You have the right to withdraw your consent at any time for processing based on consent.
5. Cookies Policy
A cookie is a small file stored on your device that holds a modest amount of data specific to a particular client and website.
Minimal Tracking
In line with your requirements, we do not use any analytics cookies (e.g., Google Analytics) or any third-party advertising or tracking cookies to monitor your activity across the website or the internet.
Functional and Necessary Cookies
We may use strictly necessary or functional cookies to ensure the website operates correctly (e.g., session cookies, security cookies). These do not require your prior consent as they are essential for the operation of the website.
Google Maps Cookies
Our website embeds Google Maps (see Section 6) to display our location. When you view a page with an embedded Google Map, Google (via Google, LLC) may place its own cookies on your device. These cookies are controlled by Google.
Cookie Consent
To be compliant with the ePrivacy Directive, upon first visiting our website, you will be presented with a Cookie Consent Banner that allows you to:
-
Accept the use of the Google Maps cookies.
-
Reject the use of Google Maps cookies (which may result in the map not displaying).
-
View our full Privacy and Cookie Policy.
You are always free to adjust your cookie preferences via your browser settings.
6. Third-Party Services: Google Maps
We use the Google Maps service, provided by Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to visually display geographical information (our school location).
-
Data Transfer: By viewing a page with an embedded Google Map, your IP address and other information about your use of the Google Maps features may be transmitted to Google in the USA.
-
Google’s Policy: Google processes this data and may use it for its own purposes. The use of Google Maps is subject to the Google Maps/Google Earth Additional Terms of Service and the Google Privacy Policy. We recommend you review these policies.
-
GDPR: We have assessed the use of Google Maps and concluded that its functional necessity for providing our school location is a legitimate interest. However, we minimize the impact by requiring user consent for the related cookies as outlined in Section 5.
7. Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data from accidental loss, misuse, unauthorised access, disclosure, alteration, and destruction. This includes the use of encryption (SSL/TLS) for data transmission.
8. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
-
Inquiries: Data collected through inquiry forms will be deleted or anonymized once the inquiry is resolved, typically within 12 months, unless further communication or a relationship is established.
-
Consent: Data held based on your consent (e.g., for a newsletter) will be held until you withdraw your consent.
9. Your GDPR Data Protection Rights
Under GDPR, you have the following rights regarding your personal data:
-
The Right to be Informed: To be informed about how your data is being used (which is the purpose of this policy).
-
The Right of Access: To request a copy of the information we hold about you.
-
The Right to Rectification: To request that we correct any inaccurate or incomplete data we hold about you.
-
The Right to Erasure (‘Right to be Forgotten’): To request that we delete your personal data, subject to certain legal exceptions.
-
The Right to Restrict Processing: To request that we limit the way we use your personal data.
-
The Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format.
-
The Right to Object: To object to the processing of your personal data in certain circumstances.
To exercise any of these rights, please contact the Data Controller using the details provided in Section 2. We will respond to your request within one month.
10. Right to Lodge a Complaint
If you are not satisfied with our response or believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with the Data Protection Commission (DPC), the supervisory authority in Ireland:
Data Protection Commission
21 Fitzwilliam Square South,
Dublin 2, D02 RD28, Ireland
Website: https://www.dataprotection.ie/
11. Changes to this Privacy Policy
We may update this policy periodically to reflect changes in our practices or legal requirements. We will post the revised policy on this page and update the “Last Updated” date at the top. We encourage you to review this policy whenever you visit our website.
