PRISYM Privacy Statement

PRISYM is committed to protecting and respecting your privacy. We understand the importance of protecting personal data and are committed to handling your personal information responsibly, transparently and securely.

This Privacy Statement explains how PRISYM collects, uses, stores and protects personal data when you visit our website, contact us, engage with our services, register for or attend our webinars and events, subscribe to our communications, or otherwise interact with us.

For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR) and applicable Irish data protection legislation, PRISYM will act as a data controller where we determine the purposes and means of processing your personal data.

We are committed to ensuring that personal data is:

• Processed lawfully, fairly and transparently.
• Collected for specified, explicit and legitimate purposes.
• Adequate, relevant and limited to what is necessary for those purposes.
• Accurate and kept up to date where necessary.
• Retained only for as long as is necessary for the purposes for which it was collected, or as otherwise required by law.
• Processed securely and protected against unauthorised access, loss, misuse, alteration or disclosure.
• Processed in accordance with your rights under applicable data protection law.

This Privacy Statement is intended to provide you with clear information about how PRISYM handles personal data and the rights available to you in relation to that data.

Our processing of personal data is governed primarily by the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), together with applicable Irish data protection and electronic communications legislation.

We may update this Privacy Statement from time to time to reflect changes in our services, our data-processing practices, legal requirements or other developments. The latest version will be published on our website, and the effective date will be indicated at the top of the statement.

1. CONSENT

Where we rely on your consent as the legal basis for processing your personal data, PRISYM will ask for your consent at the appropriate time and in a clear and specific manner.

You are not required to provide consent to the processing of your personal data where PRISYM has another lawful basis for processing that information, such as where processing is necessary to provide a service you have requested, to perform a contract, to comply with a legal obligation, or where it is necessary for our legitimate interests and those interests are not overridden by your rights and interests.

Where you provide your consent to receive marketing communications from PRISYM, you may withdraw that consent at any time. You can do this by using the unsubscribe or opt-out functionality provided in our communications or by contacting us directly.

Withdrawing your consent will not affect the lawfulness of any processing carried out before your consent was withdrawn.

Where you provide personal data relating to another individual, you should ensure that you have the appropriate authority or lawful basis to provide that information to PRISYM and, where necessary, that the individual has been informed about how their personal data may be processed.

Your continued use of our website does not, by itself, constitute consent to all processing of your personal data described in this Privacy Statement. Different types of processing may rely on different legal bases, as explained throughout this Privacy Statement.

2. IDENTITY

This Privacy Statement explains how PRISYM processes personal data when you interact with our website, services, content, events and other activities.

PRISYM is responsible for the processing of personal data described in this Privacy Statement where PRISYM determines the purposes and means of that processing.

For questions about this Privacy Statement or how PRISYM processes your personal data, please contact PRISYM using the contact details published on our website.

3. PURPOSE

Information we collect from or about you may be used for the following purposes:

• To operate, maintain and provide the features, content and services available through the PRISYM website.
• To respond to enquiries, requests for information, contact-form submissions and other communications you send to us.
• To provide information about PRISYM, our services, solutions, insights, events, webinars and other activities that may be relevant to you.
• To manage our relationship with you, including where you engage with PRISYM in connection with our services, events, webinars, research, publications or other business activities.
• To administer and manage registrations for webinars, events and other PRISYM activities, where applicable.
• To maintain appropriate records of enquiries, communications, engagements, registrations and other interactions with PRISYM.
• To operate, administer, secure, maintain and improve our website, systems, services and business; to understand how our website and services are used; and to identify opportunities to improve our content, customer experience and offerings.
• To conduct research, analysis and reporting, including using aggregated or anonymised information to understand trends, website usage and engagement with our services and content.
• To support our business development, marketing and communications activities, including sending information about PRISYM’s services, insights, events, webinars and related content where permitted by applicable law and, where required, with your consent.
• To personalise or tailor communications and content where appropriate, based on information you have provided to us and your interactions with PRISYM.
• To comply with our legal and regulatory obligations, and to establish, exercise or defend our legal rights where necessary.
• For any other purpose that is compatible with the purpose for which your personal data was collected or where we have obtained your consent, where consent is required.

4. DISCLOSURE

PRISYM may share personal data with third parties where this is necessary, lawful and appropriate for the purposes described in this Privacy Statement. We will only disclose personal data where there is a valid legal basis to do so and, where appropriate, we will have suitable contractual and other safeguards in place.

Third parties with whom we may share personal data may include:

• Service providers and suppliers: We may share personal data with trusted third parties who provide services to PRISYM, such as website hosting, IT and technology services, data storage, communications, customer relationship management, analytics, email delivery, event and webinar administration, and other business support services.
• Professional advisers: We may share personal data with professional advisers, such as legal, accounting, audit, insurance or other professional service providers, where reasonably necessary for the operation and protection of our business.
• Business partners and service providers: Where necessary to deliver a service, event, webinar, programme or other activity requested by you or in which you participate, we may share relevant personal data with the organisations or individuals involved in delivering that activity.
• Marketing and communications providers: Where we use third-party platforms or providers to manage communications, marketing or event-related activities, relevant personal data may be shared with those providers solely to enable them to provide those services to us and in accordance with applicable data protection requirements.
• Website, analytics and technology providers: We may share technical and usage information with providers that help us operate, secure, analyse and improve our website, systems and digital services. Where possible, we will use aggregated or anonymised information for analytical purposes.
• Legal and regulatory authorities: We may disclose personal data to government authorities, regulators, law enforcement bodies, courts or other third parties where we are required to do so by law, regulation, legal process or where disclosure is necessary to establish, exercise or defend our legal rights.
• Protection of rights and safety: We may disclose personal data where reasonably necessary to protect the rights, property, safety or security of PRISYM, our users, customers, employees or other persons, or to detect, investigate or prevent fraud, unlawful activity or security incidents.
• Business transfers: If PRISYM is involved in a merger, acquisition, restructuring, financing, sale of assets or other transfer of all or part of our business, personal data may be transferred as part of that transaction, subject to applicable data protection requirements.
• With your direction or consent: We may disclose personal data where you have specifically requested or authorised us to do so, or where you have otherwise provided consent and consent is the applicable legal basis.

PRISYM may use service providers located outside Ireland or the European Economic Area (“EEA”). Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law and that appropriate safeguards are in place where required.

Our website may contain links to third-party websites, platforms or services. Those third parties operate independently of PRISYM and may have their own privacy notices and data-processing practices. PRISYM is not responsible for the privacy practices, security or content of third-party websites or services. We recommend reviewing the relevant third party’s privacy notice before providing them with personal data.

Where PRISYM uses third-party platforms or services, including social media, analytics, communications or other technology platforms, those providers may process personal data in accordance with their own privacy policies and contractual arrangements with PRISYM. PRISYM does not control the independent processing activities of such third parties outside the services they provide to us.

5. RIGHT OF ACCESS

The rights described in this Privacy Statement are statutory rights and do not form part of any contract between you and PRISYM.

You have the right, under applicable data protection law, to request information about whether PRISYM processes personal data relating to you and, where we do, to request access to that personal data and information about how it is being processed.

You may also request a copy of the personal data we hold about you. Depending on the circumstances, you may have additional rights in relation to your personal data, including the right to request that inaccurate or incomplete information be corrected, to request the erasure of your personal data, to restrict certain processing, to object to certain processing, and to request the portability of your personal data. These rights are subject to the conditions and exemptions provided for under applicable data protection law.

PRISYM will normally provide access to your personal data free of charge. We may charge a reasonable fee or refuse to act on a request where a request is manifestly unfounded or excessive, particularly where requests are repetitive, as permitted by applicable law.

To protect your personal data, we may need to verify your identity before responding to a request. We will only request information that is reasonably necessary to confirm your identity and protect against unauthorised disclosure.

Requests should be made in writing, where possible, and may be submitted using the contact details provided in Section 2 of this Privacy Statement.

We will respond to a valid request without undue delay and, in any event, within one month of receiving the request. Where a request is particularly complex or we receive a large number of requests, this period may be extended by up to a further two months where permitted by law. Where an extension is required, we will inform you within one month of receiving your request and explain the reason for the delay.

If you wish to access, correct, update, restrict or delete personal data that you have previously provided to PRISYM, or exercise any other applicable data protection right, please contact us using the details provided in Section 2.

When contacting us, please provide sufficient information to allow us to understand your request and locate the relevant personal data. We may ask you to clarify your request where this is reasonably necessary to process it.

6. RIGHT OF RECTIFICATION OR ERASURE

You have the right, under applicable data protection law, to request that PRISYM correct any personal data we hold about you that is inaccurate or incomplete.

In certain circumstances, you also have the right to request the erasure of your personal data. This is sometimes referred to as the “right to be forgotten”. PRISYM will consider such requests in accordance with applicable law. The right to erasure is not absolute and may not apply where PRISYM is required or permitted by law to retain or continue processing certain personal data.

You may also have the right to request that PRISYM restrict the processing of your personal data in certain circumstances, for example where you dispute the accuracy of your personal data or where you have objected to certain processing.

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Where you object to direct marketing, PRISYM will stop processing your personal data for those purposes.

Requests for rectification, erasure, restriction or objection should be made in writing using the contact details provided in Section 2 of this Privacy Statement. We may ask you to provide sufficient information to identify the personal data concerned and, where reasonably necessary, to verify your identity.

We will respond to your request without undue delay and, in any event, within one month of receiving it, subject to any extension permitted by applicable data protection law for complex or numerous requests.

When submitting a request, please clearly explain the personal data concerned and the action you are asking PRISYM to take.

7. EXTENT OF DATA BEING PROCESSED

PRISYM may collect and process different categories of personal data depending on how you interact with us and the services, content and features you use. The personal data we process may include the following:

• Identity and contact information – such as your name, email address, telephone number, business address and other contact information that you choose to provide to us.
• Professional and business information – such as your job title, role, employer, organisation, industry, professional interests and other information relating to your professional relationship with PRISYM.
• Enquiry and communication information – information you provide when you contact us, submit an enquiry, request information, communicate with us, or otherwise interact with PRISYM. This may include the content and records of correspondence and communications.
• Event and webinar information – information provided when you register for, attend or participate in a PRISYM webinar, event, workshop or other activity. This may include registration details, attendance information, participation details and information you provide in connection with the event.
• Subscription and marketing information – information relating to your subscriptions or preferences, including where you sign up to receive newsletters, insights, updates or other communications from PRISYM, together with records of your marketing preferences and requests to opt in or opt out.
• Website and technical information – information about your use of our website and digital services, which may include your IP address, browser type and version, operating system, device information, time zone, approximate location, referring website, pages viewed, dates and times of visits, response times, navigation and interaction information, and other technical information generated when you use our website.
• Cookie and similar technology information – information collected through cookies and similar technologies used on our website. The types of information collected and the purposes for which it is used are described in our Cookie Policy.
• Usage and engagement information – information about how you interact with our website, content, communications, webinars, events and services, which may be used to understand engagement and improve our offerings, subject to applicable law.
• Information provided voluntarily – any other personal data you choose to provide to PRISYM, including information contained in documents, forms, emails, messages, feedback, applications, submissions or other communications.
• Information obtained from third parties – where permitted by law, we may receive personal data from third parties, such as business partners, event providers, professional networks, publicly available sources, service providers or organisations with which you are associated.
• Information generated by PRISYM – we may generate or derive information from your interactions with PRISYM, including records of communications, enquiries, registrations, event participation, website activity and engagement with our content and services.

We may collect personal data directly from you when you provide it to us through our website, by email, telephone, in person, through forms, during events or webinars, or through other communications or interactions with PRISYM.

We may also automatically collect certain technical and usage information when you visit or use our website, subject to your browser settings, applicable law and your cookie preferences.

The amount and type of personal data we collect will depend on how you interact with PRISYM. We aim to collect only personal data that is adequate, relevant and limited to what is necessary for the purposes for which it is processed.

Where information is collected in an anonymised or aggregated form so that it can no longer reasonably be used to identify you, it will generally not be treated as personal data.

8. COOKIES

9. SECURITY

PRISYM is committed to protecting your personal data and has appropriate technical and organisational measures in place to protect it against unauthorised access, unlawful processing, accidental loss, destruction or damage.

Where we use third-party service providers to process personal data on our behalf, we take appropriate steps to ensure that suitable security and data protection measures are in place.

Where personal data is transferred outside Ireland or the European Economic Area (EEA), we will take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law.

While we take reasonable steps to protect personal data, no method of transmitting or storing information can be guaranteed to be completely secure. You should also take reasonable steps to protect your own personal information when using websites and online services.

10. USE OF SERVICES BY MINORS

PRISYM’s website and services are not intended for individuals under the age of 18.

We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected personal data from an individual under 18 without appropriate consent or other lawful basis, we will take reasonable steps to delete that information.

11. ACCURATE, COMPLETE AND UP TO DATE

We rely on you to provide accurate and complete personal data when you communicate with PRISYM or use our website and services.

If any personal data you have provided to us is inaccurate, incomplete or no longer up to date, please let us know so that we can update our records where appropriate.

You may contact PRISYM using the contact details provided in Section 2 of this Privacy Statement to request that your personal data is corrected or updated.

We will take reasonable steps to ensure that the personal data we hold is accurate and, where necessary, kept up to date.