Research Privacy Notice


The Irish Taxation Institute trading as “Irish Tax Institute” (Institute, our, us or we) is committed to protecting the privacy and security of your personal data.

The Institute collects certain information about you when carrying out market research. This privacy notice describes how we collect and use the personal data of individuals who participate in such research (also referred to in this notice as ‘you‘ or the ‘research participant‘).

This notice, together with our General Data Protection Notice (external) , sets out how and why we use your personal data.


The Institute is a “data controller” which means that we are responsible for deciding how we hold and use personal data about you.


Most of the personal data that we collect will be provided by you through your voluntary participation in our market research projects (for example, be it a quantitative survey, VOX pop, focus group(s) or interview (whether online or in person)). Such projects will be operated by us or by third party market research companies on our behalf.

When you participate in such market research, you can refuse to answer certain questions, to share your opinions as well as discontinue participating in a study at any time.


The following personal data is collected to allow you (as research participant) to participant in our market research projects (Category A):

  • Your name, home address, and email address
  • Your age and gender
  • Year of joining membership
  • Year of course completion
  • Current sector of employment
  • Seniority in organisation
  • Company size

When you participate in our market research projects (for example, be it a quantitative survey, VOX pop, focus group(s) or interview (whether online or in person)), certain information will be collected from you including but not limited to:

  • Your responses in any focus group
  • Your responses to any survey, interview and feedback questionnaire

Your responses in any focus group will be shared with us by the market research company (Category B) but your responses to surveys, interview and feedback questionnaires will be anonymous and the market research company will use this data to produce anonymous, statistical research findings and insights for us – such data is not considered personal data in law as it does not directly or indirectly reveal your identity. However, if we combine or connect this data with your personal data so that it can directly or indirectly identify you, we shall treat the combined data as personal data which will be used in accordance with this Privacy Notice.

Your responses in any focus group are confidential. We will never sell, share, rent or otherwise intentionally transfer your responses to anyone else.


We will only use your personal data in the following circumstances:

  • Where we have obtained your consent
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests

The table below describes the legal basis that applies to our purposes for processing your personal data. Depending on the circumstances, more than one legal basis may apply:

Purpose for processing Categories of personal data Legal basis for processing 
Administration, organisation, planning and monitoring the delivery of our market research projects by third party providers on our behalf; reviewing the results of the market research; communicating with you to address any queries you may have in respect of our market research projects; to the extent that the results of the market research project identifies you, communicating with you to discuss any answers your gave during the project A, B





Necessary for our legitimate interests for research and statistical purposes; for  developing our educational programmes and services; to evaluate the recruitment landscape for our graduates; to evaluate the tax field as a chosen career for graduates as well as operating and growing our business


Necessary for the legitimate interest of companies who provide research marketing services to ensure that they run smoothly



You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.


We will share your personal information with third parties where required by law, where based on consent or where we have a legitimate interest in doing so.

We will share personal data in respect of your participation in our market research projects with third party companies who administer and run those research projects on our behalf. The following third-party service providers process personal data about you for this purpose: Ipsos (Ireland). Any personal data you provide with this company will be stored in the UK and processed by them in accordance with its privacy policy (details of which you will be provided with in advance of participating in the research). We require such parties to respect the security of your data and to treat it in accordance with the law.

We will not transfer the personal information we collect about you outside the EEA.


We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.


We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for including for the purposes of satisfying any legal, accounting or reporting requirements. The retention periods below will normally apply to research projects.

Type of Data


Retention Period Reason / Comments
Survey and interview responses and feedback questionnaires (anonymised) 5 years Best practice
Focus group responses 5 years Best practice


Your Legal Rights

Under certain circumstances, by law you have the right to:

  • Request access to your personal data.
  • Request correction of the personal data that we hold about you.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request the restriction of processing of your personal data.
  • Request the transfer of your personal data to another party.

Please click on link to find out more about these rights.

If you want to exercise any of the above rights, please contact Martin Carney in writing at Irish Tax Institute, South Block, Longboat Quay, Grand Canal Harbour, Dublin 2, or contact us by email us at If you wish to access your personal details you can use our Request Form.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes.

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

What we may need from you and Response Time to Request

We may need to request specific information from you to help us confirm your identity and ensure your right to access the data (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We will respond to your request in writing, or orally if requested, as soon as practicable and in any event within one month of receipt of your request. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Right to withdraw consent

 Where you have provided to us your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.

To withdraw your consent, please contact Martin Carney at Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.


If you have any questions about this event privacy notice or how we handle your personal data, please contact Martin Carney at You have the right to make a complaint at any time to the Data Protection Commission (DPC), the Irish supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the DPC, so please contact us in the first instance.


We reserve the right to update this online examination privacy notice at any time and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.


If you have any questions about this privacy notice, please contact Martin Carney at

Last Updated: 24 October 2022