Privacy Policy » Catalyst Group

Catalyst respects your right to the privacy and confidentiality of your personal information. This policy sets out the obligations of Catalyst as a data controller regarding data protection and the rights of data subjects when you visit this website or interact with Catalyst online dealing with personal information, in order to ensure that Catalyst complies with the requirements of the General Data Protection Regulation (the “GDPR”) and the Data Protection Acts 1988 to 2018, (the “Acts”). It also outlines your rights as a data subject with respect to personal data Catalyst may process if we provide our services to you.

This privacy statement will give you a better understanding of:
What information we collect;
How we use that information;
Your rights under the General Data Protection Regulation;
How we protect your Data;
How this information is shared.

We will not collect any personal information about you on this website without your consent. Any personal information which you volunteer to us will be treated with the highest standards of data security and confidentiality. By visiting our website, you are accepting the terms of this website privacy policy.
This website contains external links to other websites, Catalyst is not held responsible for the privacy policies of other websites.

Who are we?

Catalyst is a provider of services to the construction industry, all of which are focused on improving quality for clients and the public along with cloud-based software services that help companies manage and optimise their construction projects.

Where Catalyst offers CertCentral or other software products to a client, Catalyst will act as a data processor for the personal data it may process on behalf of its clients. The data controller of personal data collected through our software products is the Catalyst client who has purchased our software.

What type of information do we collect and how do we use it?

To allow us to provide our services as data controller, we collect and process various categories of personal information as set out in the table below. We will use your information (personal or otherwise) for the purpose for which you have provided it and to respond to you if required. Some of the data we collect is used in aggregate form (and therefore anonymously) to monitor the use of our website and to research our user’s behaviour, demographics and interests.

Purpose of Processing	Categories of personal data	Legal Basis
Website
Facilitate efficient communication (e.g. web forms, system demo requests etc.)	Name, contact details such as email, phone, and other information as provided by you	GDPR Article 6 (1) (a): consent
Maintain and improve the website	Cookies, IP addresses, browser details, Operating System	GDPR Article 6 (1) (a): consent
Fraud prevention	Cookies	GDPR Article 6 (1) (a): consent
Facilitate job applications	Name, Contact details (email, phone number), CV, cover letter	GDPR Article 6 (1) (a): consent
Services and SAAS
Contractual agreement for services	Name, contact details, business details	GDPR Article 6 (1) (b): contract
Provide access to our software products	Name, email, telephone, project role, professional qualifications, company name	GDPR Article 6 (1) (b): contract
Manage and deliver the software products to our users	Audit trail of a user’s system usage (access, files downloaded, areas accessed), geo location	GDPR Article 6 (1) (b): contract
Issue approvals, certifications and process approvals	Name, signature, project role, company	GDPR Article 6 (1) (b): contract
Compliance with legal and regulatory obligations	Contract details, certifications, communications relating to projects	GDPR Article 6 (1) (b): contract GDPR Article 6 (1) (c): legal obligations
Health and Safety on sites (if used)	Name, contact info, company, role, health issue, summary of data	GDPR Article 9 (2) (a): consent

How do you keep my data secure?

Catalyst is fully committed to ensuring that your information is secure with us and with the third parties who act on our behalf. We have a number of security precautions in place to prevent the loss, misuse or alteration of your information. All employees working for Catalyst have a legal duty to keep information about you confidential and staff are trained in information security and confidentiality. Catalyst has information security policies and procedures in place to ensure that information about you is safe, whether it is held in paper or electronic format.

As the security of communications via the internet is not completely secure, we cannot guarantee the security of any information that you disclose using your internet connection. You accept the inherent security implications of using the internet. We will not accept liability for any direct, consequential, incidental, indirect, or punitive losses or damages arising from your use of online communications.

How long do we hold onto your personal data?

Catalyst will retain your information for as long as necessary to provide you with services, and to comply with our legal and regulatory obligations. We are committed to protecting your personal data to the very best of our ability and take the appropriate steps to do in collecting, storing and destroying your data.

Do we use cookies?

Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your web browser (if you allow it) that lets the sites or service providers’ systems to recognise your browser and capture and remember certain information. You can control which cookies are set through our cookie consent tool when you visit our website for the first time

This website uses the following cookies:

Google Analytics

Storing user preferences

If you prefer, you can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies via your browser settings. Like most websites, if you turn your cookies off, some of our services may not function properly.

Do we disclose any information to outside parties?

We only disclose personal data provided by you to external third parties in connection with specific purposes and compliance. Specifically for this website we may share your data with third parties who provide technical support on this website. It is not used in any other way, other than described in this policy or as required by law, unless you agree. We do not sell, trade, or otherwise transfer your personal data to outside parties. We do not send your data outside of the European Economic Area except for projects in which we are processing data outside of the EEA specifically at the request of the client.

We reserve the right to share your personal information if we are legally obliged to.
Non-personally identifiable visitor information may be provided to other parties for reporting and statistical purposes. For example, we may disclose the total number of visits to our website.

Users 16 years and under

If you are aged 16 or under, you MUST obtain your parent/guardian’s permission beforehand whenever you provide personal information to our website. Users without this consent are not allowed to provide us with personal information.

What are your rights under GDPR as a data subject?

Under the General Data Protection Regulation, you, as a data subject have a number of rights which are detailed below. Some of these only apply in specific circumstances and are qualified in several respects by exemptions in data protection legislation. We will advise you in our response to your request if we are relying on any such exemptions.

Access to personal data: you have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data.
Correction of personal data:  you have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete.
Right to withdraw consent:  Where we have relied upon your consent to process your personal data, you have the right to withdraw that consent.
Right of erasure: you have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten.
Right to data portability:  you have the right to request us to provide you, or a third party, with a copy of your personal data in a structured, commonly used machine-readable format.
Right to restrict processing of personal data: you have the right to request that we no longer process your personal data for particular purposes, or to object to our processing of your personal data for particular purposes.
Right to object to processing of personal data: You have the right to object to our use of your personal data which is processed on the basis of our legitimate interests. However, we may continue to process your personal data, despite your objection, where there are compelling legitimate grounds to do so or we need to process your personal data in connection with any legal claims.

Some of these rights only apply in certain circumstances; they are not guaranteed or an absolute right. Please contact our team if you have any questions or concerns about your rights. If you make a request, we have one month to respond to you.

If you have any cause for complaint about our use of your personal information, please contact us and we will do our best to solve the problem for you. If we are unable to help, you also have the right to lodge a complaint with Ireland’s supervisory authority, the Data Protection Commission:

21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland.
https://www.dataprotection.ie/en/contact/how-contact-us

Changes to our privacy policy

We reserve the right to make changes to our privacy policy at any time without prior consultation; these changes will be posted on this page together with the privacy policy revision date.

Contacting us.
If there are any questions regarding this Privacy Policy, you may contact us using the information below.
info@catalyst-group.com