)
)
)
Privacy Statement
MIA Privacy Notice: MercyWorld.org Website
Overview
What you need to know in brief.
MercyWorld.org is the website of Mercy International Association (MIA). This means that MIA are the “Data controllers” of this website. We operate this website for two key purposes, to develop Community and for Communication. We use the lawful bases of consent and legitimate interests for processing personal data. We use a limited amount of third parties that process personal data either directly on our website or indirectly through external links to the service providers own webpage. MIA will never knowingly engage in any practices that will bring harm to you through your interaction with this website. We ask you to read this Privacy Notice and Cookie Notice in full prior to your engagement and if you have any questions and concerns to contact us as dataprotection@mercyinternational.ie.
This Notice may be updated from time to time. Last updated: 5 October 2020
Full Notice
Who are we?
MercyWorld.org is the website of Mercy International Association (MIA). This means that MIA are the “Data controllers” of this website. Our registered office address is Mercy International, 11 Adelaide Road, Dublin 2, Ireland
Why do we have a website?
We have two main purposes for operating this website: Community and Communication.
Community
We use this website to further our purpose of inspiring Sisters of Mercy, their #associates and the wider public to engage with, reflect on and be inspired by Catherine McAuley. Prayer is an important part of our lives in MIA. As we get requests from people daily to pray for their intentions, we are offering this service through our website. This service is offered through the Storyblok system with the highest standards of care and security. Please follow the guidance provided on the webpage if you wish to send an intention.
Communication
We use this website to communicate information about our history, services, and events. We also operate the website to enable our users to communicate with us and with each other. In addition, we have a presence on social media platforms such as Facebook and Twitter.
Our Values in Operating this Website
- We will operate to the highest standards of practice
- We will keep the privacy of the users to the forefront of design and operation
- We will only collect minimal personal data
- We will only use third party services that we trust
- We will review and reflect to ensure security is appropriate and adequate
- We will never knowingly cause harm by misusing personal data
What personal data is collected through our website and why?
We collect a minimal amount of personal data through our website.
The table below shows the personal data we collect, why we collect it, our lawful basis under GDPR and additional information that may be of use.
Type of Personal Data
Lawful Basis
Why collected
Additional Information
Contact information such as name and email
Consent
Subscription for our newsletter
This service is operated through Mailchimp. Users can unsubscribe at any time.
Contact information such as name and email
Consent
For posting comments and in response to particular news items or articles
This service is operated through Disqus.
Contact information and payment information
Consent
For booking events and programmes
This service is operated through Eventbrite
IP address from which you accessed the website, the pages you visit, information about your device type, operating system type and browser type.
Legitimate Interests but you must consent first through our cookie banner
To help us understand how users interact with our website
This information is anonymous. This information is gathered through Google Analytics. See our cookie notice.
Aggregated information about our newsletters – e.g. have they been opened, have links been clicked, aggregated forward to friends
Legitimate Interests
To help us understand the performance of our newsletters
This information is gathered through a web beacon that Mailchimp places on newsletters and not directly through our website.
Personal Information and Payment Information
Consent
To buy items through our online store
This service is operated through Shopify
Do we use third parties and why?
We use a small number of third party service providers on our website.
We have chosen these service providers for a number of reasons including their strong approach to privacy. We review these services, including their privacy policies and cookie policies on a regular basis. We recommend that you read the Privacy Policies and Cookie Policies of the services. Where appropriate, we have Data Processing Agreements with or clauses included in the terms of services of our chosen providers.
These third party services are international organisations. As such, they may transfer personal data outside the EU/EEA. In the case of transferring personal data to the US, these companies are all Privacy Shield Compliant. The European Court of Justice ruling on 16th July 2020 invalidated the Privacy Shield. We are considering the impacts of this ruling on our relationships with these services. For more information on how these services manage international data transfers, please review their privacy policies.
The table below provides information about the service, why we are using it, additional information and links to their Privacy and Cookie notices. Please be aware that when you click these links, you are leaving our website and we have no control over these third party websites use of personal data or cookies.
Name of service
Reason we use it
If I do not want this service, what can I do?
Additional Information
Link to Service Privacy and Cookie Policy
Disqus
This service enables you to add comments under articles and other content
You can turn off this service in our cookie banner by turning off functional cookies.
If you turn off functional cookies, you will not be able to leave a comment.
Turning off functional cookies may affect other aspects of the website.
Eventbrite
This service enables you to book events and programmes with us
You can contact us directly by email.
Issuu
This service enables you to view content such as videos and reading material
You can turn off this service in our cookie banner by turning off functional cookies
If you turn off functional cookies, you will not be able to view some of the content on the website.
Turning off functional cookies may affect other aspects of the website.
Mailchimp
This service enables you to subscribe to our newsletter
You can access our newsletter on our website.
We have opted out of Mailchimp’s Data Analytics Project. You can too at https://mailchimp.com/dsar-requests/
Shopify
This service enables you to buy items from our online store
If you are in Dublin, you can buy items in our physical store. If you reside outside Dublin, you can email us or call us to purchase items
When you click on our online shop, this takes you from the MercyWorld.org website to our online shop which is hosted through Shopify. This is an external link. In order for our shop to work, certain cookies may be placed on your device. Shopify may also place other cookies for their own use on your device. Please use their cookie banner to control your preferences.
Our Social Media Presence
We have a presence on social media platforms such as Facebook and Twitter. These accounts are used to post information such as notices about our events and the day’s Mercy Quote. These accounts are not monitored. Please be aware that any responses to our content on these social media platforms is done so through your own choice, at your own risk and without expectation of privacy.
We say this because we are not able to control how other users on these platforms may act. We are also not able to control how these platforms may use your personal data nor do we endorse how these services use personal data.
The table below lists our social media account platforms with links to their privacy and cookie notices. We advise you to read these policies in advance of using their services. Please be aware that when you click these links, you are leaving our website and we have no control over these third party websites use of personal data or cookies.
Social Media Platform
Links to Policies
Facebook
Twitter
YouTube
Vimeo
How do we keep information secure?
The MercyWorld.org website processes a small amount of personal data. However, we take our duty to protect this data very seriously and have in place technical and organisational safeguards to do this.
Examples of technical safeguards include: a headless CMS which does not have a traditional database; regular security testing; daily website backups; disaster recovery systems.
Examples of organisational safeguards include: access controls to personal data; staff training; organisational policies, procedures, and handbooks.
To the best of our ability, we will keep any personal data safe. However, no system or transmission over the Internet is 100% secure. This means that we are unable to absolutely guarantee the security of personal data.
If you become aware of something that gives your concern about the security of your personal data, please contact dataprotection@mercyinternational.ie.
What are my rights?
MIA is an organisation committed to ensuring that the rights and freedoms of our website users are respected and that you as a data subjects are enabled to exercise your rights.
Under data protection law, you have rights including:
- Your right of access - You have the right to ask us for copies of your personal information.
- Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
- Your right to object to processing - You have the the right to object to the processing of your personal data in certain circumstances.
- Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. These rights are not absolute and there may be times when we are not able to fulfil your request but we will always explain that to you.
Please contact us at dataprotection@mercyinternational.ie if you wish to make a request or receive a copy of our full Data Protection Notice
If I am not happy what can I do?
We hope that you have no need to complain, but if you do, please contact us first and we hope that we will be able to resolve it in a fair and amicable manner. dataprotection@mercyinternational.ie
You have the right to complain to our Supervisory Authority
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02RD28
Ireland
You also have the right to a judicial review. Please see www.dataprotection.ie for more information.