Who we are
This privacy notice provides you with details of how we collect and process your personal data. James Shanahan and Gary O’Sullivan practising as Shanahan O’Sullivan Legal LLP are the data controller and we are responsible for your personal data.
Our contact details are:
- Post: Shanahan O’Sullivan Legal LLP, The Gallery, 13 Bedford Row, Limerick, V94 VY47, Ireland
- Email: firstname.lastname@example.org
- Phone: 061 513113 / 021 243100
If you would like to request a hard copy version of this Privacy Notice or you have any other questions please contact us by one of the methods detailed above.
How we collect personal data
Personal data may be collected in a number of ways, including:
- Through our provision of legal services to you/our client;
- When we collect publicly available information about you; and
- When we collect your personal data from third parties.
The legal basis for the processing of this data is necessary for the purpose of the legitimate interests of our firm in representing you/our clients.
The type of personal data that we may collect
The categories of personal data that we may collect includes, but is not limited to, the following:
- Contact details (including names, date of birth, national insurance number, postal addresses, email addresses and telephone numbers);
- Professional information such as job titles, previous jobs, and professional experience and qualifications;
- Where you provide it, information about your hobbies and interests;
- Images captured and provided on CCTV cameras or from those publicly available on social networking sites;
- Images depicting bodily scarring/injury and medical records;
- Financial data (including bank details and credit card details), details of earnings/state benefits;
- Vehicle information, driving license and motor insurance information; and
- Previous claims history.
- Where necessary and legally permitted, we may also collect more sensitive data such as diversity, health data (including hospital/GP notes and records, medical reports etc.), details of offences and related proceedings.
The legal basis for the processing of this data is necessary for the purposes of the legitimate interests pursued by our firm in representing you/our clients.
Where we store and transfer your personal information
We store the information you provide on our practice case management system. We may, in certain circumstances, transfer personal information between our three offices. We may also be required, during the course of our legal services, to transfer your personal data to third parties.
We may also send you emails through our email service provider.
We will retain this data for a minimum of 6 years in accordance with our Data Retention Policy unless we reasonably consider it necessary to retain it for a longer period than is necessary.
We will not transfer or share data outside of the EU without your prior consent.
Processing personal data for recruitment purposes
We may process your personal data in accordance with our Recruitment and Selection processes. For job applicants to the firm, we process data:
- to recruit new employees; and
- to ascertain your suitability for a specific role
The legal basis for this processing is necessary for the purpose of the legitimate interests of our firm in recruiting new staff.
We will retain this data for a period of 3 years in accordance with our Data Retention Policy.
Our Website and Cookies
You may browse our website without providing us with any personal data and this will not affect your ability to view our website.
Your rights relating to personal data
You have the following rights under the GDPR, in certain circumstances and subject to certain exemptions, in relation to your personal data:
- Right to access the data – you have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data.
- Right to rectification- you have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete.
- Right to erasure – you have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten. However, please note that we may not always comply with your request for specific legal reasons which will notified to you at the time of your request, if applicable.
- Right to restriction of processing or to object to processing – you have the right to request that we no longer process your personal data for particular purposes, or to object to our processing of your personal data for particular purposes.
- Right to data portability – you have the right to request us to provide you, or a third party, with a copy of your personal data in a structured, commonly used machine readable format.
- Right to withdraw consent – If we are processing personal data based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing which took place prior to its withdrawal.
If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Data Protection Commission (DPC), the Irish supervisory authority for data protection issues (www.dataprotection.ie). Please contact us first if you do have a complaint so that we can try to resolve it for you.