Privacy policy for AI mandate inference content

Privacy policy

I prefer to state data practices plainly. This page explains what I collect, why, how long I keep it, when I share it, and which rights you have under Irish and EU data protection law when you use mandate inference content on this site.

Data I collect

I collect limited personal data when you browse this site or contact me directly. Typical information includes technical details from your browser, such as IP address, device type, and basic usage logs, along with any contact details and message content you provide through forms or direct email. I may also record consent choices related to cookies and similar technologies. I do not intentionally collect sensitive categories of data, and I aim to keep personal data collection proportionate to the services offered here.

Contact details you submit, such as name, work email address, and optional phone number, when you reach out.
Message content you provide in forms or emails, including context about your role, institution, and mandate-related questions.
Technical data from your browser, including IP address, device identifiers, and basic log information for security and diagnostics.
Cookie and consent preferences that record which optional cookies or tracking technologies you have accepted or rejected.
Aggregated analytics information about how visitors navigate the site, used to refine mandate inference explanations and structure.

Most data come directly from you, through forms or communications, or indirectly via standard web technologies such as server logs and analytics cookies. Where analytics tools are used, they are configured to minimise identifiability and focus on aggregated patterns about how practitioners use mandate inference content. I do not buy marketing lists or combine your data with unrelated external databases, and I avoid collecting more information than is reasonably needed to operate and improve this site.

How your data are used

I use personal data primarily to operate this site, respond to enquiries, and maintain a secure, reliable environment for mandate inference content. That includes handling contact requests, managing ongoing correspondence, and scheduling discussions where you ask for them. Technical and log data help me monitor performance, detect misuse, and troubleshoot issues that might affect availability or security.

I also use aggregated or pseudonymised data to understand how visitors engage with AI mandate inference material, so I can improve explanations, navigation, and examples. Where I rely on consent, such as for certain analytics or functional cookies, you can withdraw it at any time without affecting your access to the core content. In all cases, I try to align data use with the expectations of practitioners who prefer minimal, clearly justified processing.

Your data protection rights

Under GDPR and related Irish rules, you have rights over your personal data, including access, rectification, erasure, restriction, portability, and objection in certain situations. You can also withdraw consent where processing is based on it and lodge a complaint with a supervisory authority if you are unhappy with how your data are handled. I take these rights seriously and aim to respond to requests within the timeframes set by law.

Right of access

You can ask me whether I process your personal data, request a copy, and obtain basic information about sources, purposes, and legal bases.

Right to rectification

If you believe personal data I hold about you are inaccurate or incomplete, you can ask me to correct or update them without undue delay.

Right to erasure

You can request deletion of personal data where it are no longer needed, where consent is withdrawn, or where you object and there is no overriding reason to keep it.

Right to data portability

You can ask to receive certain personal data you provided in a structured, commonly used format, and request that I transmit it to another controller where technically feasible.

When data are shared

I do not sell your personal data. I may share limited information with service providers who help me operate this site, such as hosting companies, email services, and analytics or security tools. These providers are expected to handle data under appropriate contractual safeguards, including confidentiality and data protection commitments aligned with Irish and EU requirements. Where possible, I choose providers that store and process data within the European Economic Area or under recognised transfer mechanisms.

In some cases I may need to share data with professional advisers, or with regulatory and public authorities, for example when responding to legal obligations, enforcing rights, or addressing security incidents. Any such sharing is limited to what is necessary in the circumstances. If I collaborate with partners on AI mandate inference research, I aim to use anonymised or aggregated information; if personal data are involved, they are shared only where a clear legal basis and appropriate safeguards exist.

How your data are protected

Security is less about slogans and more about habits. I host this site with reputable providers, use encryption in transit, and restrict access to systems that store personal data to those who genuinely need it. Administrative interfaces are protected with strong authentication practices, and I review configurations periodically to reduce unnecessary exposure. Logs and alerts help me notice unusual activity that could indicate attempted misuse.

No system is perfectly secure, and I do not pretend otherwise. If I become aware of a data incident that affects your personal information, I will assess the impact and, where required, notify you and relevant authorities in line with Irish and EU rules. I also aim to minimise the volume and sensitivity of personal data I hold, so that any incident is less likely to cause significant harm.