HEA Data Collection Notice- Transfer of Business Data in respect of Irish Research Council

The Higher Education Authority (HEA) is committed to protecting all personal data which is collected from stakeholders during the course of their interaction at the HEA.

These stakeholders can include applicants and awardees, referees, supervisors, HEI staff, assessors, suppliers, members of the Irish Research Council (IRC).

Short description of the processing activity

It is necessary to transfer business data from the HEA to Research Ireland (“RI”) in order to facilitate the transfer of functions from the Irish Research Council.

For more information on these arrangements, please consult the Memorandum of Understanding governing the transfer of data to Research Ireland.

Who is the Data Controller?

HEA is data controller for data relating to research collected by HEA/IRC. When this data is transferred to RI, it becomes the controller of this data.

What personal data is collected?

Data contained in system, emails and shared files relating to the business of the IRC, website and social media data, contract and supplier information relating to IRC, financial data relating to IRC.

Who has access to the personal data of data subjects and to whom can they be disclosed?

Relevant staff in RI will have access to your personal data as necessary and proportionate, following the transfer.

Where did we get your personal data?

From IRC systems, application forms, emails and processes used by IRC.

What is the purpose and legal basis for processing your personal data?

S67 of the Act provides for the transfer of certain records held by the HEA relating to activities as respects research and innovation carried out by the Irish Research Council to be transferred to RI on the Establishment Day (‘Business Data’).

How long will we retain your data?

The HEA will retain personal data for six months, after which it will be destroyed. RI to develop retention periods for all data they process.

What are your rights regarding your data?

You have the right to access your personal data and to request your personal data to be rectified, if the data is inaccurate or incomplete; where applicable, you have the right to request restriction or to object to processing, to request a copy or erasure of your personal data held by the data controller. If processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent before its withdrawal. Your request to exercise one of the above rights will be dealt with without undue delay and in any case within one month.

We will never use automated decision making on your personal data.

Contact details for enquiries regarding your personal data

Please contact dataprotection@hea.ie for any queries.

Elliot McVann is the Data Protection Officer for Research Ireland-elliot.mcvann@researchireland.ie

You have the right to lodge a complaint with the Data Protection Commission (dataprotection.ie)