IMTA

IMTA 2027

Privacy Policy & Data Protection Notice

Data Controller: Fernhill Estates Limited ("the Organiser", "we", "us", "our")

This Privacy Policy outlines how we collect, process, store, and protect personal data in compliance with the General Data Protection Regulation (EU GDPR) and the Irish Data Protection Acts 1988–2018.

Who We Are (Data Controller)

Fernhill Estates Limited acts as the Data Controller for all personal data collected through www.irishmarkettraderawards.ie. If you have any questions regarding how your data is handled, you may contact our Data Protection Lead:

Information We Collect and Why

We collect personal information depending on how you interact with our website.

Public Voters

Data Collected: Email address, IP address, device verification logs, and timestamps.

Purpose: Vote verification, preventing duplicate or fraudulent voting, and maintaining competition integrity.

Legal Basis (GDPR Art. 6): Legitimate Interests (Art. 6(1)(f)) to ensure fair competition outcomes.

Nominated Traders

Data Collected: Business name, contact person name, email address, phone number, stall location, and proof of public liability insurance.

Purpose: Processing nominations, communicating award status, publishing finalist profiles, and verifying legal trading status.

Legal Basis (GDPR Art. 6): Contractual Necessity / Steps prior to Contract (Art. 6(1)(b)) and Legitimate Interests (Art. 6(1)(f)).

Event Ticket Buyers

Data Collected: Name, billing address, email address, phone number, and payment transaction details (via secure payment gateway).

Purpose: Processing ticket sales, issuing event entry passes, and managing event logistics and safety.

Legal Basis (GDPR Art. 6): Contractual Performance (Art. 6(1)(b)) and Legal Obligation (Art. 6(1)(c)).

Newsletter Subscribers

Data Collected: Name and email address.

Purpose: Sending updates about key dates, ceremony tickets, and future awards cycles.

Legal Basis (GDPR Art. 6): Explicit Consent (Art. 6(1)(a)). Consent can be withdrawn at any time.

Data Retention (How Long We Keep Your Data)

  • Public Voting Logs & Email Addresses: Kept for a maximum of 90 days post-ceremony for audit and dispute resolution purposes, after which they are permanently deleted or anonymised.
  • Subscriber Data: Retained until you click "Unsubscribe" or request deletion.
  • Financial & Transaction Records: Retained for 6 years in accordance with Revenue Commissioners statutory accounting obligations.
  • Nominee & Winner Archive: Trader business names and award winning status remain publicly archived on the website as historical records of award results.

Data Transfers & Third-Party Processors

We do not sell, rent, or trade your personal data. We engage vetted service providers (Data Processors) under strict data protection agreements to operate the Awards:

  • Hosting & Database Providers: Secure web and database infrastructure located within the EU/EEA.
  • Vote Verification Services: Software tools used to detect bot networks and duplicate votes.
  • Email & Communication Platforms: Automated transactional email delivery systems.
  • Payment Gateways: PCI-DSS compliant providers (e.g., Stripe) to handle financial transactions securely. We do not store credit card details on our servers.

Complaints

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the Irish Supervisory Authority:

Data Protection Commission (DPC)

21 Fitzwilliam Square South, Dublin 2, D02 RD28

Website: www.dataprotection.ie