Privacy Notice

1. Who We Are

The Data Controller for your personal data is:

Irish Whale and Dolphin Group (IWDG)
Merchants Quay, Kilrush, Co. Clare, Ireland
Email: dataprotection@iwdg.ie
Website: www.iwdg.ie

2. Information We Collect

We collect personal data in the following contexts:

a) IWDG Shop and Membership

When you purchase products, join as a member, or renew membership, we collect:

• Name
• Email address
• Contact number
• Postal address (including county and postcode)

This information is stored securely in our membership database and is accessible only to authorised IWDG officers (membership, outreach, sightings, strandings, and IT) to carry out their roles. The membership officer may contact you by phone or email to discuss your order or membership preferences, including local group participation.

b) Reporting Scheme (Sightings and Strandings)

When submitting a sighting or stranding report, we collect:

• Name
• Email address
• Phone number
• Location information

This information helps us validate reports and may be used by our sightings or strandings officers to follow up. If you prefer to remain anonymous, you may enter “anonymous” in the name field. Please note that while names may appear publicly with reports, email addresses and phone numbers are never published.

c) Website Analytics

We use Google Analytics to understand how visitors use our website. This may include information such as:

• Country of origin
• Pages visited
• Duration of visit
• Device type

Your IP address is anonymised before storage and processing. We use this data to improve our communication, outreach, and conservation activities. Google acts as a data processor on our behalf and processes data in accordance with their Privacy Policy.

d) Public Forums and Social Media

Information shared voluntarily by you on our social media pages, website forums, or public reporting tools may be visible to others. Please do not share sensitive personal data in public posts.

3. Legal Basis for Processing

We process your data under the following lawful bases:

• Contract: To provide membership services or fulfil shop orders.
• Legitimate interests: To manage reports, respond to inquiries, and improve our services.
• Consent: For communications, newsletters, or where you opt in to specific uses.
• Legal obligation: To comply with Irish and EU law when required.

4. How We Use Your Data

• Process membership applications and shop orders
• Communicate with members and supporters
• Validate and manage reports of whale and dolphin sightings or strandings
• Improve our website and outreach effectiveness
• Comply with legal obligations

We do not sell or rent personal data to any third party.

5. Data Sharing and International Transfers

We may share personal data with trusted service providers such as:

• Payment processors
• IT and web hosting partners
• Google Analytics (as described above)

These partners process data only under contract and with appropriate data protection safeguards. Some data may be transferred outside the European Economic Area (EEA), but only to countries with adequate protection or using approved safeguards (e.g., Standard Contractual Clauses).

6. Retention of Personal Data

• Membership and shop data: retained for the duration of membership and up to 2 years thereafter.
• Reporting data: retained as long as relevant for research, verification, or scientific record purposes.
• Analytics data: typically retained for 26 months by Google Analytics.

Once data is no longer needed, it is securely deleted or anonymised.

7. Cookies

Our website uses cookies to enhance your browsing experience. Cookies help remember your preferences and improve navigation.

You can choose to accept or decline cookies through your browser settings. If you disable cookies, some website features may not function properly.

For more details, see our Cookie Policy.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, use, or disclosure. Sensitive data (such as payment details) is encrypted via SSL (Secure Socket Layer) and stored in a secure, controlled environment.

9. Your Data Protection Rights

Under GDPR, you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Ask us to correct inaccurate or incomplete information.
• Erasure: Request deletion of your data (“right to be forgotten”).
• Restriction: Request limitation of how we use your data.
• Objection: Object to processing based on legitimate interests.
• Portability: Request a copy of your data in a machine-readable format.
• Withdrawal of consent: You may withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at
dataprotection@iwdg.ie.
You also have the right to lodge a complaint with the
Data Protection Commission (DPC).

10. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available at
www.iwdg.ie/privacy and will include the date of the most recent update.

Contact Us

For any questions or concerns about this policy or how we process your personal data, please contact:

📧 dataprotection@iwdg.ie
📍 Irish Whale and Dolphin Group, Merchants Quay, Kilrush, Co. Clare, Ireland