Terms and Policies
This website adheres to the provisions of the Data Protection Acts 1988 and 2003 in Ireland in relation to the safeguarding of privacy rights of individuals.
This page presents the data protection obligations of Manresa Jesuit Centre of Spirituality (Manresa) and is part of the organisation’s commitment to data protection by design and default.
Manresa is work of the Society of Jesus (Jesuits) in Ireland, a data controller regarding the personal data which it manages, processes and stores. All concerned with Manresa may refer to guidance provided by the Office of the Irish Data Protection Commissioner for advice regarding best practice in this area and to such policies as are issued by the Jesuits in Ireland.
Our commitment to Data Protection
We believe in establishing a clear, transparent and accountable approach to our data protection to ensure that all those who support and engage with Manresa Jesuit Centre of Spirituality can do so reassured that we will handle their personal data in a secure, transparent and responsible manner with full respect for their privacy, in line with all relevant legal obligations.
Purpose of this Policy
As a data controller Manresa Jesuit Centre of Spirituality must comply with the data protection principles set out in the relevant Irish and EU legislation. This Policy applies to all personal data collected, processed and stored by Manresa in the course of its activities. This Policy is designed to ensure Manresa’s compliance with the European General Data Protection Regulation (GDPR) in effect from 25 May 2018.
Definitions of terms used in this Policy:
'Personal data' means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
'Processing' means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
'Controller' means the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data;
'Processor' means a natural or legal person, which processes personal data on behalf of the controller;
'Recipient' means a natural or legal person, to which the personal data are disclosed, whether a third party or not.
'Third party' means a natural or legal person, other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
'Consent' of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
'Supervisory authority' means the Irish Data Protection Commissioner, as an independent public authority established by Ireland pursuant to Article 51 of the GDPR.
Scope
Manresa Jesuit Centre of Spirituality, as a data controller, collects, processes and stores personal and data on an ongoing basis about its staff, and stakeholders who come into contact with the organisation through our work.
We process personal data so that we might:
- Create and manage mailing lists
- Recruit, manage and pay staff
- Enrol and correspond with people in relation retreats, courses or events
- Register and record participation in externally validated courses
- Comply with statutory obligations
- Receive and manage enquires about services we offer
- Offer food services
- Provide accommodation
- Collect and manage donations
Manresa also contracts other companies to act as data processors for the personal data collected by us. This Policy applies to all data collected, both manually and automated, held by Manresa . This includes electronic and paper records.
Ownership
The Data Protection Policy is maintained by Manresa Jesuit Centre of Spirituality’s DPO and is approved by the Director and/or Board. Further comments or questions on the content of this Policy should be directed to the DPO. Any material changes to this Policy will require approval by the Director and/or Board.
The use of third-party data processors
In the course of its role as data controller, Manresa Jesuit Centre of Spirituality engages third-party service providers, or data processors, to process personal data on its behalf. In each case, a formal, written contract is in place with the processor, outlining their obligations in relation to the personal data, the security measures that they must have in place to protect the data, the specific purpose or purposes for which they are engaged, and the understanding that they will only process the data as instructed by Manresa, and in compliance with the European General Data Protection Regulation and the EU Electronic Communications Regulations.
The contract will also include reference to the fact that the data controller is entitled, from time to time, to audit or inspect the data management activities of the data processor, and to ensure that they remain compliant with the relevant legislation, and with the terms of the contract. Failure of a data processor to manage Manresa’s data in a compliant manner will be viewed as a breach of contract, and will be pursued through the courts if necessary.
Data Protection Principles
The following key Principles are enshrined in EU legislation and are fundamental to Manresa Jesuit Centre of Spirituality’s Data Protection Policy.
# In its capacity as data controller, Manresa ensures that all data shall:
### Be obtained and processed fairly and lawfully.
Manresa will only process personal data in line with one of the lawful basis enshrined in Article 7 of the GDPR. Manresa will fulfil its obligation in this regard by ensuring that:
Where possible, the informed consent of the data subject will be sought before their data is processed. Manresa will ensure that the request for consent is presented in a manner which is clearly distinguishable from the other matters, in an intelligible and easily accessible form, using clear and plain language.
Manresa will also ensure that the data subject is made aware of his or her right to withdraw his or her consent at any time.
Where it is not possible to seek consent, Manresa will ensure that collection of the data is justified under one of the other lawful processing conditions listed in Article 7 of the GDPR (compliance with legal obligation, contractual necessity, vital interests of data subject, public interest, or the legitimate interests of the data controller).
Where the data processed by Manresa can be considered sensitive personal data, as defined in Article 9 of the GDPR, the organisation will not collect, process and store such data, unless permissible under the exemptions listed in Article 2 (a-j) of the GDPR.
Processing of the personal data will be carried out only as part of Manresa’s lawful activities, and it will safeguard the rights and freedoms of the data subject.
The data subject’s personal data will not be disclosed to a third party other than to a party contracted by Manresa and operating on its behalf, or where Manresa is required to do so by law.
### Be obtained only for one or more specified, legitimate purposes
Manresa Jesuit Centre of Spirituality will obtain data for purposes which are specific, lawful and clearly stated. A data subject will have the right to question the purpose(s) for which Manresa holds their data, and Manresa will be able to clearly state that purpose or purposes.
### Not be further processed in a manner incompatible with the specified purpose(s).
Any use of the data by Manresa Jesuit Centre of Spirituality will be compatible with the purposes for which the data was acquired and Manresa will take steps to ensure that no personal data will be further processed in a manner that is incompatible with those purposes in line with the principles laid down in Article 5 of the GDPR.
### Be adequate, relevant and not excessive in relation to the purpose(s) for which the data were collected and processed.
Manresa Jesuit Centre of Spirituality will ensure that the data it processes in relation to data subjects is adequate, relevant and limited to what is necessary in relation to the purposes for which the data is collected, in line with the principles laid down in Article 5 of the GDPR. Data which is not relevant to such processing will not be acquired or maintained, in line with the principle of data minimisation.
### Be kept accurate, complete and up-to-date where necessary.
Manresa Jesuit Centre of Spirituality has adopted a Data Quality Policy, in line with the principles laid down in Article 5 of the GDPR, to: Ensure that administrative and IT validation processes are in place to conduct regular assessments of data accuracy; Conduct periodic reviews and audits to ensure that relevant data is kept accurate and up-to-date. Manresa conducts a review of sample data every six months to ensure accuracy; Ensure that staff contact details and details on next-of-kin are reviewed and updated every two years, or on an 'ad hoc' basis where staff members inform the office of such changes; Conduct regular assessments in order to validate the need to keep certain personal data; Ensure that every reasonable step is taken to ensure that inaccurate personal data is erased or rectified without delay.
### Not be kept for longer than is necessary to satisfy the specified purpose(s).
Manresa Jesuit Centre of Spirituality will ensure that personal data is not kept for longer than is strictly necessary for the purpose for which the data is processed, in line with the principles laid down in Article 5 of the GDPR To fulfil this commitment, Manresa has developed a Data Retention Policy and associated schedule to ensure Manresa fulfils its obligation in regards to retention periods for all categories of personal data processed by the organisation. Once the respective retention period has elapsed, Manresa undertakes to destroy, erase or otherwise put this data beyond use.
### Be kept safe and secure
Manresa Jesuit Centre of Spirituality will ensure that the personal data it collects will be protected against unauthorised or unlawful processing and against accidental loss, destruction or damage. To this end, Manresa will employ high standards of security in order to protect the personal data under its care.
In the event of a data breach likely to result in a risk to the rights and freedoms of the data subject or other persons, Manresa will notify the Irish Data Protection Commissioner without undue delay and, where feasible, within 72 hours after having become aware of the breach, in line with Article 33 of the GDPR.
In the event of a data security breach affecting the personal data being processed on behalf of the data controller, the relevant third-party processor will notify the data controller without undue delay.
Data subject rights: Clear and easily accessible communication
Manresa Jesuit Centre of Spirituality will take appropriate measures to ensure any and all communication with a data subject is conducted in a concise, transparent, intelligible and easily accessible from, using clear and plain language that is easy for the data subject to understand. Information provided to data subjects Manresa will ensure that all data subjects will be made aware, at the time their data is being collected, of:
- The identity of the data controller (Manresa Jesuit Centre of Spirituality );
- The contact details of the DPO;
- The purpose(s) for which the data is being processed;
- The legitimate interests pursued by the controller (if processing is based on Article 6 (1)(f) of the GDPR)
- The person(s) to whom the data may be disclosed by the data controller;
- Any other information that is necessary so that the processing may be considered fair. Right of access by data subjects
Upon receipt of a valid, formal request by a data subject in relation to the personal data held by Manresa which relates to them, the organisation will provide the data subject with the following information, free of charge, in line with Article 15 of the GDPR:
- The purposes for processing the data.
- The categories of personal data concerned.
- To whom the data has been or will be disclosed.
- Whether the data has been or will be transferred outside of the EU.
- The period for which the data will be stored, or the criteria to be used to determine retention periods.
- Information about the right to make a complaint to the Irish Data Protection Commissioner.
- Information about the right to request rectification or deletion of the data.
- Whether the individual has been subject to automated decision making.
Manresa will ensure that all subject access requests receive a response within 30 days.
Right to rectification and the right to be forgotten
As covered above in point 5 of this Policy, Manresa Jesuit Centre of Spirituality has put in place processes to ensure the complete and accurate nature of the personal data it collects. However, in the event that a data subject submits a valid request for correction or completion of incorrect or incomplete data, Manresa will ensure that any such data will be rectified or completed without undue delay, in line with Article 16 of the GDPR, and that the data subject is informed of the correction or completion of data.
Manresa will ensure that, upon request of the data subject, and where one of the specific grounds listed in Article 17 of the GDPR applies, all personal data related to the data subject in question is erased without undue delay, and that the data subject is informed of the erasure.
The right to restriction of processing and the right to object
Manresa Jesuit Centre of Spirituality will put in place processes that ensure respect for a data subject’s right to object or have restriction put in place against processing of their data.
Manresa will ensure these processes comply fully with Article 19 – Notification obligation regarding rectification or erasure of personal data or restriction of processing and Article 21 – Right to object of the GDPR.
Policy review
This Policy will be reviewed at least annually to ensure alignment to appropriate risk management requirements and its continued relevance to current and planned operations, or legal developments and legislative obligations.
Supervisory authority
Should you wish to contact the relevant supervisory authority in relation to a data protection issue involving Manresa Jesuit Centre of Spirituality, you should contact:
-
The Office of the Data Protection Commissioner
Telephone: +353 57 8684800 +353 (0)761 104 800Fax +353 57 868 4757
Dublin Office: 21 Fitzwilliam Square, Dublin 2, D02 RD28, Ireland
Portarlington Office: Canal House Station Road, Portarlington, R32 AP23 County Laois
TERMS OF USE – MANRESA WEBSITE
1. Introduction
1.1 By accessing or using the www.manresa.ie website (the “site”), you acknowledge and agree to the disclaimers and terms and conditions (“Terms”) set forth below.
1.2 These Terms apply to your use of the site which is operated and owned by Manresa House, an Irish Charity located at 426 Clontarf Road, Dollymount, Dublin 3, Ireland (“Manresa”, “we”, and/or “us”).
1.3 Please ensure that you (referred to as the “user”, “you” or “your” within these Terms) read these Terms with care. If you do not agree to these Terms, you should not use the site.
1.4 We reserve the right, at our sole discretion, to change, modify, add or remove portions of these Terms at any time. You should check these Terms periodically for changes as by using the site after we post any changes to these Terms, you are agreeing to accept those changes, whether or not you have reviewed them. By using the site you agree to be legally bound by these terms and conditions just as if you had signed this agreement.
1.5 These Terms may be supplemented by additional terms and conditions pertaining to specific content and activities. You agree and understand that such additional terms and conditions are hereby incorporated by reference to these Terms.
1.6 You are responsible for making all arrangements necessary for you to have access to the site. You are also responsible for ensuring that all persons who access the Site through your Internet connection are aware of these Terms, and that they comply with them. The end of this web page states when the last changes were made to these Terms.
2. Acceptable use of this site
2.1 It is impossible to provide an exhaustive list of exactly what constitutes acceptable and unacceptable use of this site. In general, Manresa will not tolerate any use of the site which damages or is likely to damage our reputation, the availability or integrity of the site or which causes us or threatens to cause us to incur any legal, tax, regulatory or other liability. We therefore request you to treat our site with respect, and not to use the site for any illegal purpose, or in such a way as to infringe or breach others’ rights or to cause us damage. We also ask you to comply with any relevant notices, policies and terms imposed by third parties whose website, products or services you access through the site.
2.2 We reserve the right to suspend the use of the site generally or block your access to any part of the site and/or to suspend or terminate your rights to use the site or any part of it if we suspect misuse. We shall then report any misuse of the site to the relevant enforcement or other authorities and to our legal advisers. We further reserve the right to disclose any evidence we have which relates directly or indirectly to misuse of this site.
2.3 If any material on this site, or your use of this site, is contrary to the laws of the jurisdiction in which you are located then this site is not intended for your use and we ask that you do not use this site. You are responsible for compliance with the laws of the jurisdiction in which you are located.
3. Intellectual property
3.1 All materials incorporated in or accessible through the site, including, without limitation, text, photographs, images, graphics, illustrations, logos, button icons, audio clips, video clips, software, and other content, and the compilation, collection, arrangement, and assembly thereof (including the look and feel of the site), are protected by Irish and/or international copyright laws, and are owned, controlled or licensed by Manresa, or by the original creators of such materials or their permitted licensors. All such rights are reserved. Such materials may be used only for viewing the site in the ordinary course or as a resource for purchasing the products and/or services offered through the site. Any other use of such materials, including any copying, reproduction, modification, sale, distribution, extraction, re-utilisation, transmission, republication, downloading, display, posting, performance, or other exploitation thereof by any means or medium without the prior written permission of the copyright owner is strictly prohibited. All trade marks on this site, such as the Jesuits in Ireland, may not be used without our prior written permission.
3.2 All material contained in and published on the site by Manresa is intended for the non-commercial use of the user. Subject to these Terms, we grant you a non-exclusive, non-transferable, limited right to access and use the site and the material displayed thereon. However, no right, title, or interest in any such materials will be granted or transferred to you as a result of any permitted use of such materials. You may print off one copy, and may download extracts, of any page(s) from the site for your personal reference and you may draw the attention of others to material posted on the site. You must not modify the paper or digital copies of any materials you have printed off or downloaded in any way, and you must not use any illustrations, photographs, video or audio sequences or any graphics separately from any accompanying text. Our status (and that of any identified contributors) as the authors of material on the site must always be acknowledged. You must not use any part of the materials on the site for commercial purposes without obtaining a licence to do so from Manresa or our licensors. If you print off, copy or download any part of the site in breach of these terms of use, your right to use the site will cease immediately.
4. Disclaimers of warranties
4.1 Manresa aims for all information we provide on this site about products and services to be correct and complete at the time of the last update to the relevant page but we do not warrant it will be correct, accurate, up-to-date and/or complete.
4.2 Use of this site is free and we take steps to ensure it is available to all permitted users, including disabled users. We do not warrant that the site will be continuously available, or that your use of the site will be uninterrupted or error-free, or that the site and server will be free from attack.
4.3 This site is provided by Manresa on an “as is” basis. To the fullest extent permitted by applicable law, Manresa disclaims all warranties, express or implied. Neither Manresa, nor any of our respective licensors, licensees, service providers or suppliers warrant that the site or any function contained in the site will be uninterrupted or error-free, that defects will be corrected, or that the site or the servers that make the site available are free from viruses or other harmful components. Manresa do not warrant or make any representations regarding the use or the results of the use of the materials incorporated in the site or any third-party site accessed through the site in terms of their correctness, accuracy, timeliness, reliability, or otherwise and you will be solely responsible for any damage to your computer system or loss of data that results from the download of any such product, offering, content or material.
4.4 Further, please note that no advice or information obtained by you from our personnel or through this site shall create any warranty not expressly provided for in these Terms.
4.5 These disclaimers apply to the fullest extent permitted by law.
5. Advertising
Part of the site may contain advertising and sponsorship. Advertisers and sponsors are responsible for ensuring that material submitted for inclusion on the site complies with international and national law. Manresa will not be responsible for any error or inaccuracy in advertising materials.
6. Limitation of liability
6.1 You expressly understand and agree that (to the fullest extent permitted by law) Manresa shall not be liable for any direct, indirect, incidental, special, consequential, exemplary or punitive damages, or any other damages whatsoever (whether direct or indirect), including but not limited to, damages for loss of profits or contracts, income or revenue, goodwill, anticipated savings, data or other intangible losses (even if we have been advised of the possibility of such damages), arising out of, or resulting from: (a) the use or the inability to use the site; (b) the use of any content or other material on the site or any website or websites linked to the site; (c) unauthorised access to or alteration of your transmissions or data; (d) statements or conduct of any third party on the site; or (e) any other matter relating to the site.
6.2 This does not affect our liability for death or personal injury arising from our negligence, nor our liability for fraudulent misrepresentation, nor any other liability which cannot be excluded or limited under applicable law.
6.3 If you are dissatisfied with any portion of the site, or with any of these Terms, your sole and exclusive remedy is the discontinuation of your use of this site.
7. Reliance on information
7.1 Commentary and other materials posted on our site are not intended to amount to advice on which reliance should be placed.
7.2 The accuracy of the information on the site is not guaranteed and is subject to change and therefore Manresa cannot accept responsibility for any loss, damage or expense incurred upon using the information provided.
7.3 We therefore disclaim all liability and responsibility arising from any reliance placed on such materials by any visitor to our site, or by anyone who may be informed of any of its contents.
8. Your obligations
8.1 You agree not to use the site or cause or permit the site to be used:
(a) to jeopardise or prejudice the operation, quality or integrity of the site, or the operation, quality or integrity of any telecommunications network;
(b) to harvest or otherwise collect information about others, including e-mail addresses, without their consent;
(c) for any commercial purpose including any direct marketing, surveys, contests or pyramid schemes, nor to use the site to participate in or cause others to participate in sending chain letters, junk e-mail, spam, duplicative or unsolicited messages, advertising or promotional material;
(d) to distribute, download, upload or transmit any material which contains viruses, trojan horses, worms, or any other harmful or detrimental programs;
(e) to attack the site via a denial-of-service attack; or
(f) contrary to the terms and conditions of any Internet Service Provider you may use.
9. Links
9.1 The site contains links to third party websites. These links are provided solely as a convenience to you and not as an endorsement by Manresa of the content on such third party websites. Manresa are not responsible for the content of linked third party sites and does not make any representations regarding the content or accuracy of materials on such third party websites. If you decide to access linked third party websites, you do so at your own risk and in accordance with the prevailing terms and conditions of such third party sites.
9.2 Manresa generally welcome hyper-linking to the site from other appropriate websites provided such links are from a reputable source and authority. Notwithstanding the foregoing, we reserve the absolute right to refuse to consent to such links without giving reasons. Any links to the site from another website must be presented in such a manner that the viewing of the site is not impaired by framing or similar techniques that may impair the visitor’s user experience.
10. Privacy
10.1 We are committed to protecting your privacy and security. All personal data that we collect from you will be processed in accordance with our Privacy Statement. You should review our Privacy Statement, which is incorporated into these Terms by this reference.
10.2 In accessing this site the User accepts that electronic mail passing over the Internet may not be free from interference by third parties. In consequence, Manresa cannot guarantee the privacy or confidentiality of any information relating to the User passing over the internet. The User shall be responsible for your communications to this site, including its lawfulness, truthfulness and accuracy.
11. Additional terms
11.1 These Terms (including the Privacy Statement) constitute the entire agreement between Manresa and you with respect to your access to and use of the site and any third party site accessed through the site.
11.2 If any provision of these terms shall be unlawful, void, or for any reason unenforceable, then that provision shall be deemed severable from these Terms and shall not affect the validity and enforceability of any remaining provisions.
11.3 Our failure to exercise or delay in exercising a right or remedy provided by these Terms or by law does not constitute a waiver of those or any other rights or remedies.
11.4 By accessing or using the manresa.ie website (the “site”), you consent to the use of cookies in accordance with our cookie policy.
12. Governing law
The site has been created and is controlled by Manresa in Ireland. These Terms will be governed by, and construed and enforced in accordance with, the laws of Ireland. You hereby unconditionally and irrevocably submit to the exclusive jurisdiction of the courts of Ireland. Those who choose to access this site from other locations do so on their own initiative and are responsible for compliance with applicable local laws.
13. Contacting us
If for any reason you wish to contact us, we can be reached at:
Manresa
426 Clontarf Road
Dollymount
Dublin D03 FP52
by email on reception@manresa.ie or via telephone on +353-1-5529448.
Thank you for visiting the site.