Privacy notice

Who we are

Said and Done (saidanddone.ie) is an independent, non-commercial archive of the public record of Dáil Éireann. The data controller is David O'Flynn, contactable at corrections@saidanddone.ie.

What personal data we process, and why

Members of the Oireachtas. We republish the official public record of debates, parliamentary questions, votes and membership history of TDs, obtained from the Houses of the Oireachtas Open Data API. (This is an Article 14 notice: we do not obtain this data from the individuals.) Our lawful basis is legitimate interests (Article 6(1)(f) GDPR): the public accountability of elected representatives for their conduct in public office. For information revealing political opinions, we rely on Article 9(2)(e): it is manifestly made public by the individuals, in a public parliamentary forum, in the course of their public duties. The service also serves journalistic and academic purposes (Data Protection Act 2018, s.43).

Other people named in the record. The parliamentary record occasionally names people who are not members of the Oireachtas. For them we rely on Article 6(1)(f) and, for any special-category data, on the freedom-of-expression and journalistic/academic provisions of the Data Protection Act 2018 (ss. 42–43), processing no more than the official record itself contains.

Notifying individuals. Because this data concerns a large number of people and is already public in the official record, notifying each individual would involve disproportionate effort; in reliance on Article 14(5)(b), this public notice is provided as the safeguard, together with the source links on every page.

Visitors: no personal data. The site has no accounts, runs no JavaScript and loads no third-party resources. All assets are served from our own domain. We count page views in aggregate: date, page and the referring site's domain only. No IP addresses and no identifiers of any kind are recorded for this, so the counts describe no one. Standard web-server logs (IP address, request, timestamp) are retained for 14 days for security and abuse prevention (legitimate interests), then deleted.

Cookies. We set one cookie, and only if you ask for it: choosing Light or Dark in the header stores that choice for a year so your pages arrive in the colours you picked. It holds the single word light or dark. It identifies nobody, is never read for any other purpose, and is not shared. Choosing Auto deletes it. No consent banner appears because a preference you explicitly asked us to remember is exempt under Regulation 5(5) of S.I. 336/2011. We set no other cookies and use no analytics or advertising cookies of any kind.

Correspondents. If you email us, we keep the correspondence for the duration of the matter and 24 months thereafter; records of data-subject requests are kept for six years as a compliance record.

Recipients and transfers

The parliamentary record is published to the public on this website, and that is the purpose. We do not sell data or share it with advertisers or analytics providers. Our processors are our hosting provider and our backup-storage provider; both store data within the European Economic Area (our server is in France; backup storage is in France). Correspondence is handled by our email provider in Switzerland, which benefits from an EU adequacy decision. Automated uptime monitoring transmits no personal data.

Retention

The parliamentary archive is retained indefinitely: the service exists to maintain a permanent public record (Article 89, archiving in the public interest). Superseded and corrected records are marked, never silently removed.

Your rights

You may request access, rectification, erasure, or restriction of your personal data via corrections@saidanddone.ie. We respond within one month; for complex or numerous requests this may be extended by up to two further months, and we will tell you if so (Article 12(3)). We may need to verify your identity first, which can pause that period. On erasure: we do not delete accurate parliamentary records on request. Article 17(3) GDPR disapplies erasure where processing is necessary for freedom of expression and information and for archiving in the public interest. Genuine inaccuracies are corrected promptly under our corrections policy, with a visible correction note.

Your right to object

You have the right to object, at any time, to our processing of your personal data for our legitimate interests (Article 21 GDPR). If you object, we will stop unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defence of legal claims. To object, contact corrections@saidanddone.ie.

Complaints

You may lodge a complaint with the Data Protection Commission.