Controller
For Citizen Case content: the selected Representative (Controller); Philoware acts as Processor.
For Representative account/admin data and website visitor data: Philoware Limited is Controller.
Data Protection Officer: dpo@constituency.ie
A. Privacy Notice
1. What we collect
Account data: name, email, phone, role, organisation.
Case data: issue title/description, location, attachments, status, messages.
Technical data: IP address, device/browser, logs, cookies (see below).
Verification data: ID document details (citizens), deleted after verification with a hash retained for audit for up to 12 months.
2. Why we collect it & lawful bases
Provide the Service (contract / public task for representatives’ work).
Security & fraud prevention (legitimate interests; legal obligation).
Analytics & improvement (legitimate interests; consent where cookies are non-essential).
Marketing (aggregated/anonymised analytics; consent for electronic marketing).
3. Sharing
With the selected Representative and authorised staff.
With third-party processors (hosting, email/SMS, security, identity checks).
With authorities where required by law.
4. Retention
Account data: active account + 12 months.
Case data: per Controller instructions.
Logs: 12 months. Back-ups: 30 days.
5. Your rights
Access, rectification, erasure, restriction, portability, objection.
Requests: dpo@constituency.ie — response within 30 days.
6. Security
Hosting on AWS Ireland; encryption in transit and at rest; 2FA; RBAC; testing; ISO 27001 programme ongoing.
7. Contact & Complaints
Data Protection Officer: dpo@constituency.ie.
You may complain to the Data Protection Commission (DPC) in Ireland.
B. Cookie & Tracking Policy
1. Purpose
Explains how we use cookies, tags and similar technologies.
2. Categories
Strictly necessary: session management, CSRF, 2FA.
Preferences: language, accessibility.
Analytics (consent-based): Google Analytics 4.
Marketing (consent-based): Meta Pixel, LinkedIn Insight Tag.
3. Consent
We operate prior consent for Analytics and Marketing cookies.
Users can Accept All / Reject Non-Essential / Customise.
Preferences can be changed anytime via Cookie Settings.
4. Retention & Control
Cookie lifetimes vary (session to 24 months).
You may block cookies in your browser.