GDPR

1. Who we are:

We are Prochem, with our registered head office at 14 Danville Business Park, Kilkenny City, R95 F727. You can contact us at this address by post or by email at [email protected].

Our data protection representative Rebecca Lynch may be contacted on 056 7790100 or at [email protected].

2. Why we process your personal data, the lawful basis for processing your data and who we share it with

2A. For people who view and interact with our website, we process data:

• to respond to your query when sent through our ‘contact us’ form

The legal basis for this processing is our legitimate interest:

• in the administration and operation of our engineering consultancy and resource services business as well as any other services we may offer,
• in marketing and promoting Prochem’s services.

We store this data on our own system, and also with service providers such as are described in section 2E (below). They may only process this data for the purpose of providing us with their services and no other purpose.

We may share this data with government, statutory and regulatory bodies such as are described in section 2D (below).

We will retain this data for no longer than is necessary for the purposes for which it was processed, unless a contractual or other relationship is entered into with the data subject. In which case the data will be held for the relevant statutory or contractual period or periods.

2B. For job applicants to, employees of and contractors / sub-consultants to Prochem, we process data:

• to recruit new employees,
• to engage new contractors,
• to engage new sub-consultants,
• to ascertain data subjects’ suitability for a specific role or function,
• to engage in tax, social welfare and human resources administration and legal affairs in relation to an employee’s employment.
• to engage in relevant administration of or in connection with contractor / sub-consultant contracts.

The legal basis for this processing is:

• that processing is necessary for the purpose of the legitimate interests of Prochem and in recruiting new staff and regulating our relationship with our employees, contractors, sub-consultants and,
• that processing is necessary for the purposes of those job applicants’, employees’ and contractors’ engagements with Prochem.

We may share the information provided by job applicants, prospective contractors and sub-consultants in their applications and/or submissions with third party clients and/or their managed service providers to support contract tenders and/or provide candidates for employment and/or contract positions with those client and service providers. The clients and/or managed service providers are not permitted to use this data other than on our behalf. We may also send you emails about your application through our email service provider.

We share information such as your name and email address with our newsletter services provider who sends out our newsletters. This provider is not permitted to use this data other than on our behalf.

We may share this data with government, statutory and regulatory bodies such as are described in section 2D (below).

We share this data with the service providers mentioned in paragraph 2E (below). They may only process this data for the purpose of providing us with their services, and no other purpose.

We will retain this data for no longer than is necessary for the purposes for which it was processed, unless a contractual or other relationship is entered into with the data subject. In which case the data will be held for the relevant statutory or contractual period or periods.

2C. For vendors, clients, managed service providers and each of their employees, agents, contractors and sub-contractors and other third parties, we process data:

• to market our business and seek out new business opportunities,
• to negotiate new contracts,
• to engage in the commercial and technical aspects of such contracts,
• to engage in taxation, regulatory and legal affairs in relation such contracts.
• to engage in relevant administration of or in connection with such contracts.

The legal basis for this processing is;

• that processing is necessary for the purpose of the legitimate interests of Prochem in commencing and regulating relationships with persons described in this section 2(C), and,
• that processing is necessary for the purposes of those parties’ engagements with Prochem.

We share information such as your name and email address with our newsletter services provider who sends out our newsletters. This provider is not permitted to use this data other than on our behalf.

We may share this data with government, statutory and regulatory bodies such as are described in section 2D (below).

We share this data with the service providers mentioned in paragraph 2E (below). They may only process this data for the purpose of providing us with their services, and no other purpose.

We will retain this data for no longer than is necessary for the purposes for which it was processed, unless a contractual or other relationship is entered into with the data subject. In which case the data will be held for the relevant statutory or contractual period or periods.

2D. Government, Regulatory or Statutory bodies, including though not limited to the Revenue Commissioners, Department of Social Welfare, the National Employment Rights Agency, Workplace Relations Commission, Solas, the Health and Safety Authority, local authorities and the Office of the Data Protection Commissioner, we process data:

• To deal appropriately with Government, Regulatory or Statutory bodies in the discharge of their duties.

The legal basis for this processing is:

• that processing is necessary for the purpose of the legitimate interests of Prochem in dealing with the various government, regulatory and statutory bodies with which companies such as ours must engage in order to operate our business and provide our services.

We share this data with the service providers mentioned in paragraph 2E (below). They may only process this data for the purpose of providing us with their services, and no other purpose.

We will retain this data for no longer than is necessary for the purposes for which it was processed, unless a contractual or other relationship is entered into with the data subject. In which case the data will be held for the relevant statutory or contractual period or periods.

2E. External professionals and service providers such as accountants, lawyers, health and safety consultants, human resources consultants, IT service providers (including Web and Cloud services), marketing and newsletter companies, insurance companies and brokers which are necessary for the efficient and proper management of a business such as that of Prochem, we process data:

• To support Prochem Engineering Limited in the course of its various activities.

The legal basis for this processing is:

• that processing is necessary for the purpose of the legitimate interests of Prochem in dealing with the various commercial, technical legal, financial and regulatory matters relevant to a Prochem with a business such as that of Prochem.

We may share this data with government, statutory and regulatory bodies such as are described in section 2D (above).

They may only process this data for the purpose of providing us with their services, and no other purpose.

We will retain this data for no longer than is necessary for the purposes for which it was processed, unless a contractual or other relationship is entered into with the data subject. In which case the data will be held for the relevant statutory or contractual period or periods.

3. Transfers of data outside the European Economic Area

We transfer data relating to the persons described in Section 2 of this GDPR Notice to web based and online email, storage, on-boarding and timesheet management services (such as but not limited to, Microsoft 365 and Constant Contact based in the United States).

4. Information received from third parties and the source of that data

Data is received from the internet, our website (www.prochem.ie) from web-based recruitment services and professional database including though not limited to LinkedIn, Monster, Irish Jobs, and by way of personal referrals.

 5. Your rights relating to personal data

You have the following rights under the GDPR, in certain circumstances and subject to certain exemptions, in relation to your personal data:

• Right to access the data – you have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data.
• Right to rectification- you have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete.
• Right to erasure – you have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten.
• Right to restriction of processing or to object to processing – you have the right to request that we no longer process your personal data for particular purposes, or to object to our processing of your personal data for particular purposes.
• Right to data portability – you have the right to request us to provide you, or a third party, with a copy of your personal data in a structured, commonly used machine-readable format.

In order to exercise any of the rights set out above, please contact us at the contact details at the start of this GDPR notice.

If we are processing personal data based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing which took place prior to its withdrawal.

If you are unhappy with how we process personal data, we ask you to contact us so that we can rectify the situation.

You may lodge a complaint with a supervisory authority. The Irish supervisory authority is the Data Protection Commission.

6. Requirement to process personal data

You may browse our website without providing us with any personal data and this will not affect your ability to view our website.

If you do not provide us with your information for the purposes described above, we cannot respond to your queries sent through our contact us form, liaise with you in regard to the provision of our services or in response to your requirements in relation to all of the matters referred to in section 2, above.

7. Automated decision-making and profiling

We do not use any personal data for the purpose of automated decision-making or profiling.