Privacy Policy

Effective Date: July 26, 2026

This privacy policy for Gemma Brolly (“We”, “Us” or “Our”) tells you how we may collect, use and share your information when you visit our website www.gemmabrolly.ie.

We appreciate your decision to use our website www.gemmabrolly.ie and to trust us with your valuable personal information. In this document, we seek to explain in the clearest terms possible our privacy practices. We strongly encourage you to read this document (and any other related documents) carefully before using the website. If there are any terms or conditions in this document that you do not agree with, please do not use the website, or in case you are already using it, please discontinue the use immediately. By using the website, you are accepting and consenting to the practices described in this Privacy Policy.

What information do we collect about you?

When we collect information, we do so to ensure that you get to experience our service seamlessly. For that, we collect the following information. Some are your personal information and some are your sensitive personal information.

The personal information that we collect about you are the following:

  • Ainm
  • Seoladh
  • Email address
  • Location data
  • Phone number
  • Constituency issue details (including photographs and supporting documents relating to the report)

How do we collect such information?

We may use any of the following ways to get information about you.

  1. The information that you give us
  2. The information that we automatically collect from you

Before going into the reasons why we collect the information that we do, we want you to understand what the above terms mean.

a. The information that you give us

When you contact us, report a constituency issue, or fill out a form on our website, we will ask you for certain information like your name, address, and email address. This is the information that you give us.

b. The information that we automatically collect from you

When you access our service from a device, we may automatically collect information from your device, such as through the use of cookies. You will know more about automatic collection of personal information in the next section.

Cookies and similar technologies

Cookies are small packets of information that are placed on your device, so that we can retrieve the information about you, such as your login information, your choices on our websites and other information.

For more information about cookies and similar technologies, please visit our cookie policy.

Do not track requests

We respond to “do not track” requests in the following manner:

Currently, various browsers offer a ‘Do Not Track’ (DNT) option that sends a signal to websites visited by the user about the user’s browser DNT preference setting. At this time, there is no uniform technological standard for recognising and implementing DNT signals. Therefore, we do not currently respond to DNT signals or any other mechanism that automatically communicates your choice not to be tracked online. Instead, we manage your privacy preferences and tracking explicitly through our Cookie Consent banner, ensuring compliance with data protection laws.

Why do we collect information about you?

We collect information about you for a variety of reasons. It helps us, among other things, to serve you better. The following are the ways in which we use the information that we collect about you.

  • To provide and maintain service
  • To contact the user
  • To evaluate and improve our products/services
  • To examine the usage trends
  • To manage constituent queries, casework, and issue reporting
  • To advocate with local councils, government departments, public bodies, and any other relevant third parties, on behalf of constituents
  • To inform constituents about local news, campaign updates, and democratic engagement opportunities

How long do we retain your information?

We retain personal data for no longer than is necessary for the purposes for which it was collected. Casework and constituency correspondence is generally retained for up to one year after a case is closed, at which point it is reviewed or securely deleted. Data processed for democratic engagement and campaigning purposes is retained in line with standard election cycles and is regularly reviewed to ensure it remains adequate, relevant, and necessary. We will retain information longer only if required or permitted by law (such as for tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Do we share your information?

We may share your information with third parties in the following ways:

  1. Sharing with your consent: When you give consent, we may share your information with third parties for the purposes that are mentioned in the consent notification.
  2. Legal Obligations: We may disclose information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).

Sale/sharing of information

We do not sell or share the information we collect from our users.

GDPR Disclosures

Automatic processing of data

We do not use any automated processing of the personal information we collect.

Legal basis for the collection

The General Data Protection Regulation requires us to identify and set out the legal basis, or in other words, the legal justification, for processing your personal information. The following are the legal bases on which we process your personal data.

Consent: We may process your personal information for the purposes described in this Privacy Policy with your consent.

Public task: We may use the data collected from you to carry out the following public tasks vested in us:

Processing is necessary for activities that support or promote democratic engagement. This includes democratic representation, communicating with electors and interested parties, surveying and opinion gathering, campaigning activities, and supporting the work of elected representatives and official candidates.

Legitimate interests: We may process your personal data where it is reasonably necessary to achieve our legitimate business interests.

To facilitate effective communication with constituents, understand local needs and concerns, ensure the security and proper functioning of our website, and conduct wider activities that support and promote democratic engagement where they fall outside the scope of a strict statutory public task.

Your rights

In accordance with Articles 12 to 23 of the General Data Protection Regulation, the data subject, that is you, has the following rights.

  1. Right to object to the processing of personal data in certain circumstances. See here for details.
  2. Right to request access to the data we have collected about you and to receive a copy of it in an accessible format.
  3. Right to restrict the processing of your personal data for a limited period, under certain circumstances. See here for details.
  4. Right to rectify or modify personal information that you consider obsolete, incomplete, or inaccurate.
  5. Right to opt out of automated processing of your personal data.
  6. Right to erasure of your personal information, also known as the right to be forgotten.

To exercise any of the rights mentioned above, you may use the contact details provided in this Privacy Policy.

Consequences of non-consent

We require your consent to collect information in order to provide our services to you seamlessly. However, you may refuse consent. Please note that refusing consent may have consequences, including limited access to our services and reduced features on the website.

Privacy of children

We do not knowingly provide our services to children. If you are a parent or legal guardian and believe that your child has provided us with information without your consent, please contact us. Upon verification that we have collected such information without parental consent, we will remove the information from our database.

Security of your personal information

We take reasonable measures to ensure that the information we collect from you is stored securely and protected to the best extent possible. However, no method of internet transmission or digital storage is completely secure, and we cannot guarantee absolute security. While we use commercially reasonable and appropriate security measures to protect your information, we cannot promise that it will be 100% secure.

Links to other websites or apps

On our website, we may provide links to external websites, apps, or services. These are not operated by us and therefore are not governed by our Privacy Policy or practices. We strongly recommend that you review the privacy policies of such websites or services before engaging with them to ensure that you do not provide personal information that you do not wish to share.

Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in the law or our privacy practices. We recommend that you review this privacy policy periodically to ensure it remains in line with your expectations.

The privacy policy will be effective from the date it is posted on this page.

Contact us

For any questions or concerns regarding your privacy, or to exercise any of your rights, you may contact us using the following details:

DPO: We have a Data Protection Officer who makes sure we respect your rights and comply with the law. If you have any concerns or questions about how we look after your personal information, please contact our Data Protection Officer at

Aontú Data Protection Officer

Irish Unity Centre

8 Market Square

Navan

Co Meath

Ireland

Email: dpo@aontu.ie

Telephone:

Dublin: 01 618 3564

Navan: 046 90 23472

Controller/representative: The data controller responsible for decisions regarding the information collected on this website is Gemma Brolly, who can be contacted at eastderry@aontu.ie.

Address: Hub 4-5, Unit 6, Glenshane Business Park, 50 Legavallon Road, Dungiven, Co. Derry, BT47 4UB

Email address: eastderry@aontu.ie

Link to our contact page: https://gemmabrolly.ie/contact/