Version: 1.1
Creation Date: 16 March 2026
Amended: 21 March 2026

Covid Community Response [the Organisation] is based in Ireland and has been set up in an effort to help coordinate ongoing national & local community initiatives in the fight against Covid-19, by sharing resources through connecting volunteers and service users.

Covid Community Response is made up of local volunteers to support vulnerable people during the Coronavirus outbreak. The service is set up to help the residents of Ireland with tasks such as shopping, transport, befriending, and basic support during isolation caused by the virus.

This Privacy Policy applies to our Organisation’s practices, our website, which are accessible from covidcommunityresponse.ie and its sub-domains, as well as any associated mobile applications owned and controlled by the Organisation. We are not responsible for the content or the privacy notices for any websites to which we provide external links.

Identity of the Data Controller and Contact Details

“Data controllers” are the people who or organisations which determine the purposes for which, and the manner in which, any Personal Data is processed, who/which make independent decisions in relation to the Personal Data and/or who/which otherwise control that Personal Data.

For the purposes of the GDPR, Covid Community Response is the data controller with regard to the Personal Data described in this Privacy Policy and Notice.

Our Data Protection Coordinator can be contacted as follows

Updates

Our practices as described here now may be changed, but any changes will be posted, and changes will only apply to activities and information on a going forward, not retroactive basis. You are encouraged to review this Notice periodically to make sure that you understand how any personal information you provide will be used. Any changes to this Privacy Policy and Notice will be posted on this website so you are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.

Why and how do we ensure compliance?

Data protection provides rights to individuals with regard to the use of their Personal Data by organisations, including our organisation. Irish and EU laws on data protection govern all activities we engage in with regard to our collection, storage, handling, disclosure and other uses of Personal Data.

Compliance with the data protection rules is a legal obligation. In addition, our compliance with the data protection rules helps individuals to have confidence in dealing with us and helps us to maintain a positive reputation in relation to how we handle personal information.

The data protection rules that apply to us are currently contained in the Data Protection Act 1988 Revised, the Data Protection Act 2018, in the ePrivacy Regulations 2011, the EU General Data Protection Regulation (EU Regulation 679/2016) (the “GDPR”) and in related legislation (together the “DPAs”).

What are the data protection principles and rules?

We aim to comply with the following principles found in Data Protection Law:

•   - Lawfulness, fairness and transparency – Personal data must be processed lawfully, fairly and in a transparent manner.
•   - Purpose Limitation. Personal data must be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
•   - Data minimisation – Personal Data must be adequate, relevant and limited to what is necessary in relation to purposes for which they are processed.
•   - Accuracy – Personal data must be accurate and, where necessary, kept up to date. Inaccurate Personal Data should be corrected or deleted.
•   - Retention – Personal data should be kept in an identifiable format for no longer than is necessary.
•   - Integrity and confidentiality – Personal data should be kept secure.
•   - Accountability – Under the GDPR, we must not only comply with the above six general principles but we must be able to demonstrate that we comply by documenting and keeping records of all decisions.

What types of personal data will we process?

As service users or volunteers with Covid Community Response we will ask you to provide certain personal information about yourself which includes your name, contact details, and sometimes any medical history/conditions you may have that will help us to provide our services to you.

Personal Data

We will collect personal data with you in accordance with the purposes outlined in this document. This will be basic personal data used to facilitate a service type relationship, usually your name, phone number and email address.

Special Category Personal Data

We may collect health data from you. You will be asked to provide your consent for this at the time of collection.

Criminal Conviction Data

We will not collect criminal conviction data from you.

Children’s Personal Data

As our service is not aimed at children, if we are notified or learn that a child has submitted Personal Data to us through our digital or social media without the correct permissions or consents, we will delete such Personal Data. If you would like to make use of our services and you are not yet 18 years old, we require that an adult is present when you register, if registration is required. Where consent is required to process your Personal Data as a child, we will obtain that consent from the adult who is authorised to give the consent on your behalf. You must be at least 18 years old to create an account and engage in activities and transactions on our digital and social media. By creating an account or engaging in activities or transactions on our digital and social media, you affirm that you are at least 18 years old and are fully able to enter into and comply with our regular Terms of Use and this Privacy Policy and Notice.

Why we need your information

We use personal data to help us provide the most appropriate level of service to our service users and volunteers. Covid Community Response requires this information in order to perform the services we currently offer to you and the local community.

Whose data do we collect?

We hold data on those using the services of, volunteer with or otherwise support the work of Covid Community Response

How we obtain your data

Most of the information we hold about you is or has been provided directly to us by you. In some cases, we may collect data from someone else. This may be by referral from a relative, friend, medical or social services, where necessary, in order to help us to provide our services to you.

What we do with your data and why

The main purposes of our data processing are to:

•   - provide appropriate help and services to the users of Covid Community Response
•   - communicate with you about Covid Community Response
•   - administer our services where we match volunteers with service users

We may use data obtained from other people or organisations to ensure that your contact details are kept up to date, to plan our services and to ensure that appropriate due diligence is carried out to safeguard the volunteers and service users of Covid Community Response.

We collect and record the following information (from the data provided by you or your representative) when completing our volunteer registration application form or other Covid Community Response (manual or electronic) forms used to help us provide services and information:

•   - Name(s) and address, email, phone number and other relevant contact details.
•   - Your current or past medical history that we need and is necessary for us provide the appropriate level of service to you. Where this is not required for us to provide our services to you we will not collect this data from you
•   - Relevant next of kin, family or friends contact details that we require and are necessary in case of emergency contact.
•   - Records of volunteering for Covid Community Response, information about our relationship with you, including correspondence, conversation notes, and volunteering activities

Cookies

Cookies are small text files that are transferred to your computer’s hard drive through your web browser to enable us to recognise your browser and help us to track visitors to our site for different purposes. Most web browsers automatically accept cookies, but, if you wish, you can set your browser to prevent it from accepting cookies. The “help” portion of the toolbar on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether.

Technical Personal Data

Like most websites, we gather statistical and other analytical information collected on an aggregate basis of all visitors to our website. We may gather technical information for security reasons. We will make no attempt to identify individual visitors, or to associate the technical details listed below with any individual. We will only use the technical information for statistical and other administrative purposes.

We may collect this technical information from you when you visit our website and accept cookies. This information may include standard information from you (such as browser type and browser language), your Internet Protocol (“IP”) address, and the actions you take on our website (such as the web pages viewed and links clicked). We do note that your IP address is considered personal data under the GDPR.

Certain information in relation to web usage is revealed via our internet service provider or hosting provider who records some of the following data. Whilst we do not access this information regularly, the technical information may be used to inform our security measures, to allow us improve the information we are supplying to our users, to find out how many people are visiting our sites and for statistical purposes. The information we receive depends upon what you do when visiting our site:

•   - The IP address you are using.
•   - The date and time you access our site.
•   - The pages you have accessed and the documents downloaded.
•   - The previous Internet address from which you linked directly to our site.
•   - The user agent used to accessed our site.

Where does your data travel to?

We make use of Discordapp as a platform for the community forum. Discord processes your data in the USA. Discord participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework.

We make use of Twilio and Zendesk to manage our call centre. Both service providers employ appropriate safeguards for cross-border transfers of personal data, as required by applicable local law, including Binding Corporate Rules and the EU–U.S. Privacy Shield and Swiss–U.S. Privacy Shield Frameworks.

Depending on your choice of cookies, there may be one cookie that transfers data to the USA served from Google Analytics namely the “collect” cookie. Google participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework.

Protecting your data

We keep your data secure. Manual paper forms are secured in locked cabinets and digital forms are held in password protected files. Only those members of Covid Community Response and those otherwise authorised have access to your data.

We do not share your data with anyone else or any other organisation unless it is necessary for the purpose for which you have given us permission or if we are legally required to do so.

Examples of when it may be necessary to share your data:

•   - We may share basic information about you with a Covid Community Response volunteer who has been assigned to help you as part of their role within Covid Community Response.
•   - In an emergency we may share your personal data and medical history with emergency services, HSE, social services or other statutory organisation, or where we are legally required to do so in order to provide the appropriate level of care and support to you.
•   - We may pass some, or all, of the information we hold on you to other organisations (Data Processors). An example would be providing data to medical or social service providers or to a maintenance contractor or other similar service provider in order to help you at your request or at the request of a person acting on your behalf.
•   - Data Processors, with whom we share data, will not use your data other than that which we have requested.
•   - We will never share your data with third parties for marketing purposes.

Our responsibilities

The law requires us to tell you the basis on which we process your data:

•   - Some activities (for example sending you emails, letters or leaflets which promote the Covid Community Response general activities) require your consent. If the law requires your consent to process data in a certain way, then we will obtain it before carrying out that activity. This will not stop you from using the services of Covid Community Response.
•   - Where consent is given, we keep a record of date, time and circumstances
•   - Where consent is given, we will record special category data such as your medical history or current health condition(s) only where necessary and for the purpose of providing our services to you.
•   - In all other cases, which we will update here, the law allows us to process your data if it is in our and your legitimate interest (in a way that you would expect the data to be used) to do so, but only so long as we need to and your “interests or your fundamental rights and freedoms are not overridden”.

Retaining your data

We will keep data for as long as is needed to complete the task for which it was collected. We will only keep the data for as long as is needed to provide our services to you.

Your rights

The law requires us to let you know your rights about the way we process your data:

•   - Where our use of your data requires consent, you may withdraw this consent at any time. You can refuse to give your consent but this will not stop you from using the services provided by Covid Community Response.
•   - You can have any incorrect data we hold about you corrected.
•   - You will be informed of any new uses of your personal data before we start processing it.
•   - Where we rely on our legitimate interest to process data, you may ask us to stop doing so.
•   - You may request a copy of the data we hold about you.
•   - You may change or stop the way in which we communicate with you or process data about you, and if it is not required for the purpose you provided it, then we will do so.

How do you exercise your rights or Opt Out?

The Website offers a publicly accessible community forum and other interactive features (“Interactive Areas”). You should be aware that any information that you post in an Interactive Area might be read, collected, and used by others who access it. To request removal of your personal information from an Interactive Area, contact us at . In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why.

We have appointed a Data Protection Coordinator to monitor compliance with our data protection obligations and with this policy and our related policies. If you have any questions about this policy or about our data protection compliance, please contact the Data Protection Coordinator.

Data subjects must make a formal request for Personal Data we hold about them or otherwise to exercise their data protections rights whether to make an access request or otherwise by contacting our Data Protection Coordinator who will respond to the request within 30 days.

We are obliged to comply with exceptions to your requests where laid out in law. Such exceptions relate to health data, disclosures that would be likely to cause serious harm to your physical or mental health or emotional condition and opinions given in confidence.

Our Data Protection Coordinator can be contacted as follows

Your Right to Lodge a Complaint

You as the Data Subject have the right to complain at any time to a data protection supervisory authority in relation to any issues related to our processing of your Personal Data. As our organisation is located in Ireland and we conduct our data processing here, we are regulated for data protection purposes by the Irish Data Protection Commissioner.

Address: Data Protection Office – Canal House, Station Road, Portarlington, Co. Laois, R32 AP23. Or 21 Fitzwilliam Square Dublin 2. D02 RD28 Ireland

Disclaimer

Covid Community Response’s website is an online community and information resource for volunteers and volunteering organisations within the Republic of Ireland. The content of this website is provided for information purposes only, Covid Community Response has made its best endeavours to ensure that the content of this website is correct and current at the time of publication but makes no warranty, express or implied that the material is accurate, authentic or complete and takes no responsibility for any error, omission or defect. Covid Community Response does not accept any liabilities for any loss, damage, cost or expense you or others might incur as a result of the information, advice or volunteering opportunities provided on this website or incorporated into it by reference. Covid Community Response is not responsible for the operations or conduct of volunteers or organisations using this service. The internet is not a secure medium and communications to and from the website may be intercepted or altered in transit. Covid Community Response does not warrant or represent that this website or any linked sites, are free from anything which may damage any computer used to access this website.