Privacy Policy

1. Who We Are

The National Bioeconomy Pilot Plant ("NBPP", "we", "us", "our") is the data controller responsible for personal data collected through this Website and in connection with our services.

Registered address:
National Bioeconomy Campus, Lisheen
Co. Tipperary, Ireland
E41 N2T9

Contact email: info@nbpp.ie

2. What Personal Data We Collect

We collect personal data only where necessary and proportionate. The types of data we may collect include:

2.1 Information you provide directly

• Full name and job title
• Organisation name
• Email address and telephone number
• Postal address
• Project enquiry details and messages submitted via our contact form
• Information provided in the context of a service agreement or project

2.2 Information collected automatically

• IP address and browser type
• Pages visited and time spent on the Website
• Referring URLs
• Device type and operating system
• Cookie identifiers (see Section 9: Cookies)

2.3 Information from third parties

We may receive information about you from publicly available sources, partner organisations, or referrals, where relevant to a service engagement.

3. How We Use Your Personal Data

We use personal data for the following purposes and legal bases under GDPR:

We do not use your personal data for automated decision-making or profiling.

4. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Contact form enquiries: up to 2 years from last communication, unless converted to a project.
• Project and contract data: 7 years from project completion (in line with Irish statutory requirements).
• Financial and invoicing data: 7 years in accordance with Irish Revenue requirements.
• Website analytics data: up to 26 months (aggregated and anonymised where possible).
• Marketing consent records: until consent is withdrawn.

When data is no longer required, it is securely deleted or anonymised.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We may share data with trusted third parties strictly on a need-to-know basis:

• IT and website service providers (e.g. hosting, email platforms) who process data on our behalf under a Data Processing Agreement.
• Funding bodies such as Enterprise Ireland or the EU Just Transition Fund, where required for compliance and reporting purposes.
• Legal and financial advisors where necessary to fulfil our legal obligations.
• Regulatory or government authorities, where required by law.

Any third party with whom we share data is required to comply with GDPR and to implement appropriate technical and organisational security measures.

6. International Data Transfers

We aim to store and process your personal data within the European Economic Area (EEA). In the event that any data is transferred outside the EEA, we will ensure such transfers are conducted in compliance with GDPR, including through the use of Standard Contractual Clauses or other approved transfer mechanisms.

7. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your data, subject to legal retention requirements.
• Right to Restriction: You may request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: You may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@nbpp.ie. We will respond within one calendar month. If you are unsatisfied with our response, you have the right to lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie.

8. Data Security

NBPP takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption on all data transmitted via the Website
• Access controls and role-based permissions for internal systems
• Regular security reviews and staff training on data protection
• Secure storage of physical documents containing personal data

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours and, where required, notify affected individuals without undue delay.

9. Cookies

This Website uses cookies to improve your browsing experience and to analyse website traffic. Cookies are small text files stored on your device.

Types of cookies we use:

• Strictly necessary cookies: Required for the Website to function. These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with the Website (e.g. Google Analytics). These are only set with your consent.
• Preference cookies: Remember your settings and choices to improve your experience.

You can manage your cookie preferences via the cookie consent banner displayed when you first visit the Website, or through your browser settings. Disabling certain cookies may affect the functionality of the Website.

For more information on how Google Analytics uses data, visit policies.google.com/privacy.

10. Links to Third-Party Websites

This Website may contain links to external websites. NBPP is not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any third-party websites you visit.

11. Children's Privacy

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@nbpp.ie and we will take steps to delete such information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised date. We encourage you to review this Policy periodically. Where changes are material, we will take reasonable steps to notify you.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us: