Privacy Policy
The General Data Protection Regulation (GDPR) is a European Union Regulation that has been designed to strengthen and unify Data Protection within the EU. It also provides a number of rights to data subjects.
The department will comply with its responsibilities under the legislation in accordance with the data protection principles as follows:
- Personal data shall be processed lawfully and fairly
- Personal data shall be collected for one or more specified, explicit and legitimate purposes and shall not be processed in a manner that is incompatible with such purposes
- Personal data shall be adequate, relevant and not excessive in relation to the purposes for which they are processed
- Personal data shall be accurate, and, where necessary, kept up to date, and every reasonable step shall be taken to ensure that data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay
- Personal data shall be kept in a form that permits the identification of a data subject for no longer than is necessary for the purposes for which the data are processed
- Personal data shall be processed in a manner that ensures appropriate security of the data, including, by the implementation of appropriate technical or organisational measures, protection against
- Unauthorised or unlawful processing
- Accidental loss, destruction or damage
Personal data
Under the GDPR, personal data is any data that relates to or can identify a living person, either on its own or when combined with other available information. Examples include:
- Name
- Phone number
- Bank details
- Medical history
Special Category Personal Data
Special category personal data includes information relating to:
- Racial or ethnic origin
- Political opinions
- Religious or philosophical beliefs
- Trade union membership
- Physical or mental health or condition
- Sexual life
- Criminal convictions or alleged offences
- Criminal proceedings, outcomes, or sentences
Key Definitions
Data subject: The individual to whom the personal data relates.
Data controller: An organisation that determines how and why personal data is processed.
Data processor: An organisation that processes personal data on behalf of a data controller.
Data Protection Policy Documents
A link to our Data Protection Policy can be found here Data Protection Policy 2025.
What are my rights?
The rights individuals enjoy under the GDPR are the same as those under the Data Protection Acts, but with some changes. Individual rights include:
- Right to obtain access to personal data: Data subjects have the right to be provided with copies of their personal data along with certain details in relation to the processing of their personal data
- Right to information: Data subjects have the right to be provided with certain information, generally at the time at which their personal data is obtained. We comply with this obligation through our privacy notice(s)
- Right to rectification: Data subjects have the right to have inaccurate personal data that a controller holds in relation to them rectified
- Right to object and restrict processing: Data subjects have the right to require that a controller restricts its processing of their data in some circumstances, and have the right to object to the processing of their personal data in certain circumstances
- Rights in relation to automated decision making: Data subjects have the right not to be subjected to processing which is wholly automated and which produces legal effects or otherwise which significantly affects them, and which is intended to evaluate certain personal matters, such as creditworthiness or performance at work, unless one of a number of limited exceptions applies
- Right to request erasure of personal data: Under certain circumstances a data subject has the right to request the erasure of their personal data.
Making a Subject Access Request
If you are making a subject access request, and to help us answer your request, please fill in the Subject Access Request Form
Completed forms should be emailed to [email protected] or sent by post to:
Data Protection Officer , Data Protection Unit , Department of Transport , Leeson Lane , Dublin D02 TR60
You are legally entitled to a decision regarding your request within 1 month of the receipt of a valid subject access request. However, every effort will be made by the Data Protection Officer to deal with your request as soon as possible. In order to validate your request, you will be asked to provide proof of your identity. To exercise any of your data protection rights contact the Data Protection Office directly.
If you are unhappy with the decision of the Data Protection Officer, you have the right to complain to the Data Protection Commissioner who will investigate the matter for you. The Commissioner has legal powers to ensure that your rights are upheld.
Further details on your rights under the Data Protection Acts are available at the Data Protection Commissioners website here.
If you have any questions or concerns please contact our Data Protection Office:
Data Protection Unit
Address: Department of Transport, Leeson Lane, Dublin 2, D02 TR60
Website: https://www.gov.ie/en/publication/fdde77-data-protection/
Email: [email protected]
Privacy Statement
This website is maintained by the Office of the Government Chief Information Officer, Department of Public Expenditure, Infrastructure, Public Service Reform and Digitalisation on behalf of government departments. The Department of Public Expenditure, Infrastructure, Public Service Reform and Digitalisation fully respects your right to privacy, and will not collect any personal information about you on this website without your clear and explicit permission.
Any personal information which you volunteer will be treated securely and confidentially in accordance with the Data Protection Acts 1988-2018 and the General Data Protection Regulation (GDPR).
This statement relates to our privacy practices in connection with this website. Some technical terms used in this statement are explained at the end of this page.
Collection and Use of Personal Information
This website does not collect any personal data, apart from information that you volunteer. (For example, when providing feedback or asking a question). Any information you provide in this way is used only for the purpose you provide it.
Information We Routinely Collect
We may collect the following information from each user of this site:
- statistical information (IP address and hostname, web browser version, pages visited and so on)
- the previous website address from which you reached us, including any search terms used
What We Use the Information For
We use this information to analyse the usage patterns of the website in order to improve the website’s effectiveness. We will neither make attempts to identify individual visitors, nor associate the technical details listed above with any individual.
It is our policy never to disclose such information in respect of individual website visitors to any third party unless explicitly stated, or obliged to disclose such information by a rule of law.
Open Data Privacy Policy
In order to comply with GDPR, datasets containing personal data linked to this website must be published in an appropriately aggregated and anonymised form, such that they do not contain personal data of any identified or identifiable individual. The publisher of the dataset is responsible for ensuring compliance with data protection law.
If you are concerned that personal data may inadvertently have been published as part of a dataset linked to this website, you should contact the publisher of that dataset, and also inform the Department at [email protected] so that the dataset can be delinked pending further notification from the publisher.
Legal Basis
The legal basis for data processing is governed by the data controllers’ responsibility to collect data for the provision of public services, as well as their legitimate interests. The applicable legislation in each case should be set out by that data controller. Data subjects should be notified about the purpose of data collection in their service provision, please see relevant site for more information.
Cookies are small pieces of information, stored in simple text files, placed on your computer by a website. Some cookies can be read by the website on your subsequent visits. The information stored in a cookie may relate to your browsing activities on the website, or a unique identifier so that the website can ‘remember’ you on your return visit. Other cookies are deleted when you close your browser and only relate to the working of the website. Cookies on Transportdata.ie do not contain personal information from which you can be identified.
Cookies on this Website
Most browsers allow you to turn off cookies or to customise your settings for cookies. To find out how to do this, see the ‘Help’ menu on your browser. Please note that if you turn off cookies or change your settings, some features of the website may not work correctly.
Necessary
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
| Name | Provider | Purpose | Maximm Storage Duration | Type |
|---|---|---|---|---|
| _Host_sc_token | transportdata.ie | Used to maintain secure user sessions and protect against CSRF attacks | 1 year | HTTP Cookie |
| _sc_token | transportdata.ie | Security token to protect user sessions | 1 year | HTTP Cookie |
| wordpress_logged_in_* | transportdata.ie | Identifies logged-in WordPress users | 2 year | HTTP Cookie |
| wordpress_test_cookie | transportdata.ie | Checks whether cookies are enabled in the browser | Session | HTTP Cookie |
| nid | Menlo Security | Supports secure browsing and traffic protection | Session | HTTP Cookies |
Functional
Functional cookies enable the website to provide enhanced functionality and personalisation. They may be set by the website or by third-party services whose features are used on the site. Without these cookies, some features may not function properly.
| Name | Provider | Purpose | Maximm Storage Duration | Type |
|---|---|---|---|---|
| wp-settings-* | transportdata.ie | Stores user interface preferences | 1 year | HTTP Cookies |
Analytics
Analytics cookies help us understand how visitors interact with the website by collecting and reporting information anonymously. These cookies allow us to measure and improve the performance of our website by analysing pages visited, traffic sources, and user behaviour.
| Name | Provider | Purpose | Maximm Storage Duration | Type |
|---|---|---|---|---|
| tk_ai | Jetpack (Automattic | Collects anonymised analytics data | Session | HTTP Cookie |