A user can access our website and utilise a number of our services without providing any information at all. However, to access all pages and to use all opt-in services, user provide basic contact and other information. We do not provide this information to any third party.
MLA does not follow a user’s browsing path outside of the website.
Forms / Opt-ins:
If users wish to contact the MLA regarding services, they must enter personal information. Services that currently require some form of sign up include:
- Contacting us
- Online application forms
The information collected when a user contacts MLA regarding a service can include an e-mail address and name.
If a user does not wish to continue to receive communications from the MLA after he or she has registered, he or she should notify the MLA and the communications will be discontinued.
The MLA recognises its responsibility in respect of managing any personal data and is committed to protecting and preserving privacy through fulfilling the duties associated with the Data Protection Act and the General Data Protection Regulation (“GDPR”).
MLA’s website uses uses “cookies”, which are text files placed on your computer to help the website analyse how visitors use the site. The information generated by the cookie about your use of the website (including your IP address) may be transmitted to and stored by the service providers engaged by the MLA to create and run its website.
Automatically Logged Information:
The MLA may use your IP address, log user agents and referring address to help diagnose problems with our server, to administer our website and to identify unique users. Your IP address is also used to gather broad demographic information. We do not provide our log file data to any third party.
Data Protection Commissioner:
Further information on your data privacy rights are available on the website of the Data Protection Commissioner.
The MLA periodically sends promotional e-mail to its subscribers about services and products offered by the MLA. You can opt out of promotional e-mails any time by letting us know you wish to be removed from our mailing list.
MLA’s site contains links to other sites. MLA is not responsible for the privacy practices or the content of such websites.
This site has security measures in place to protect the loss, misuse, and alteration of the information under our control. Unfortunately, no data transmission over the internet can be guaranteed to be 100% secure. As a result, while the MLA strives to protect personal information, MLA cannot ensure or warrant the security of any information you transmit to the MLA and users do so at their own risk.
Rights of the Individual
According to the legislation and the GDPR individuals have the following fundamental rights in respect of the personal data held about them:
- The right to have access to personal data and information pertaining specifically to them.
- The right to correct mistakes recognised in those data or that information.
- The right to request that those data or that information be destroyed (the right to be forgotten).
- The right to refuse direct marketing.
- The right to block the processing of their personal data.
- The right to transfer personal data.
MLA will adhere to the requirements of the legislation and GDPR in every way, in accordance with the organisation’s resources and duties.
Requests for access
In accordance with the above rights an individual has the right to request personal data and information kept on them to check the information and lawfulness of the processing of the information. Under GDPR they have the right:
- To seek confirmation that their personal data are being processed
- To gain access to their personal data
- To seek other information as set out in the legislation and the GDPR
These are the steps to be taken in respect of requests to the organisation for access:
- Any application for access to information will be sent to firstname.lastname@example.org, marked for the attention of the Data Protection Officer.
- The application will be answered as soon as possible and within a month at the latest.
- To comply with the law, the information can only be revealed to the applicant or to a person authorised to obtain the information. For this reason, identity must be confirmed for the applicant or their representative. These persons can apply for access to apply for access to personal data:
- The individual to whom the personal data apply
- A representative of the individual to whom the personal data apply
- A person appointed by a court of law
- A law enforcement agency
Appropriate steps must be taken to confirm the applicant’s identity before any work on the application is started. MLA will request a time extension of two months to the above deadline if they believe that the application is complex or multifaceted. The other provisions of GDPR and the legislation will be relevant if it is deemed that the application is without grounds or excessive.
The regulation and act set out rules on how organisations should collect and use information and the MLA is committed to adhere to those rules, in proportion with the scale of their resources and their duties. But if an individual believes that the MLA has not handled their personal data in accordance with the act, they can complain to the Data Protection Officer at email@example.com
An individual can complain also if they are not satisfied with the way in which their application for access has been dealt with. Usually they will receive an answer within 20 working days after the MLA has received the complaint.
After this step, and if they are still dissatisfied, the individual can request that the Data Protection Commissioner assess whether the MLA is fulfilling the act in respect of personal data.