Innovation & Science

May 2025

1. Specified Purpose The purposes for which the Department processes your data are: To solicit feedback from stakeholders and the general public in relation to DFHERIS’s current Apprenticeship Policy (Action Plan for Apprenticeship 2021-2025) and to inform the Department’s new Action Plan for Apprenticeship, 2026–2030. 2. Legal basis Under Article 6 of GDPR the lawful bases we rely on for processing this information are [delete as appropriate]. Consent (This would be rare and would only arise where the data subject provides consent on a voluntary basis and would not suffer a detriment if they did not consent. Where consent is provided the data subject have the right to withdraw the consent at any time). 3. Source To be entered where the personal data is obtained from someone other than the data subject or parent/guardian 4. Categories of data subject Categories of data subject should be outlined: Some examples include:

The Public and Direct Stakeholder Categories as listed below:

Education and Training

ETBs, Institutes of Technology (IoTs), Technological Universities (TUs), Higher

Education Institutions offering apprenticeships

Employer Representatives and Industry Consortia

Consortia leading apprenticeships, Ibec. Chambers Ireland, Construction Industry

Federation, Irish Hotels Federation, sectoral employer bodies

Employee and Trade Unions ICTU, SIPTU, sectoral unions (e.g. TEEU, Forsa),

employee representative bodies

Apprentices and Learners Apprentice Council; alumni networks; apprentices

across sectors

Social and Community

National Learning Network, Women in Apprenticeship Network, Migrant and

Traveller education groups, disability inclusion NGOs

Public Sector Employers

Civil Service bodies, Defence Forces, local authorities, Health Service Executive

Policy and Research Bodies Expert Group on Future Skills Needs (EGFSN),

National Skills Council Regional Skills Fora, Labour Market Advisory Council, Academic researchers, labour market think tanks

5. Categories of personal data Categories of personal data should be outlined: Some examples include: Respondent’s

Name

Email Address

6. Categories of special category data If processing special categories of personal data these should be outlined here. If not processing special categories input N/A. N/A Special category data as outlined in Article 9 of GDPR is personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life of sexual orientation. 7. Further Processing Where the Department intends to further process your data or that of your child for a purpose other than the purposes listed above, the Department will provide you prior to that further processing with information on that other purpose and with any relevant further information on the processing activity and your data protection rights. 8. Recipients of the data Data Sharing To be entered where the Department is sharing information with other organisations Data may be shared with [ ] for the purpose/s of [ ]. The legal basis for this data-sharing is [ ] N/A Data Processor To be entered where the Department instructs another entity to process personal data on its behalf e.g. cloud service, printing of P60s

The Department uses [entity] to provide [type of service] as part of this processing activity. N/A 9. Storage period The data processed will be retained for a period of [ 30 years] years for the purpose of [ comparison ] Please note that your data is also subject to the National Archives Act 1986, see guidance from the National Archives: https://www.nationalarchives.ie/wpcontent/uploads/2019/03/20190309Guidance-Note_GDPR_V4.pdf 10. Third Country None of your data or that of your child or the tutor’s data will be transferred to a country outside of the European Economic Area i.e. the EU and Norway, Iceland and Liechtenstein

11. Data Subject Rights Please follow the link HERE for information on your right to access your data and that of your child’s. You may also exercise your right to correct your data, seek to restrict how it may be processed or object to how it may be processed. Your data or that or your child’s will not be used for automated decision-making or profiling, please see link HERE for a the data Protection Commissioner’s Guide to Data Subject Rights. While you have a right to have your data or that of your child deleted the Department may not be able to agree to your request if it is less than [retention period] years since you submitted your application under this scheme. The Department may not be able to agree to your request for deletion also where your data is subject to the National Archives Act 1986 and no order has been made to dispose of the this category of data under that Act, see guidance from the National Archives : Services to government – The National Archives of Ireland 12. How to complain You have the right to lodge a complaint with the Data Protection Commissioner, please see www.dataprotection.ie Further Information on how this scheme operates is available at Complaints handling, Investigations and Enforcement For Individuals | Data Protection Commission 13. Contact Details The Department of Department of Further and Higher Education, Research, Innovation and Science is the data controller for the processing of your data. If you have any query in respect of this, you may contact the Apprenticeship Policy Unit or e-mail ApprenticeshipPolicy@dfheris.gov.ie or by post to Apprenticeship Policy Unit Department of Further and Higher Education, Research, Innovation and Science Marlborough Street Dublin D01 RC96 Ireland The Department’s Data Protection Officer may be contacted by sending an e-mail to dpo@education.gov.ie or by post to Department of Education and Youth, Data Protection, FOI and Records Management, Athlone, Co. Westmeath, N37 X659.