Recruitment Privacy Policy

We, Irish Farm Accounts Co-Operative Society Limited (ifac), take privacy very seriously and we are committed to protecting your personal data.

Ifac is a personal data controller. This means that we are responsible for deciding how we hold and use personal data about you. This notice is aimed at informing you of how and why your personal data will be used, namely for the purposes of recruitment, and how long it will be retained for. It provides you with certain information that must be provided under the General Data Protection Regulation (GDPR) and Data Protection Acts 1988 to 2018.

Please read in conjunction with our Privacy Policy  for more information about how we collect, store, manage and protect your personal data.

GDPR and Data Protection Laws

Personal data will be:

i)       Processed lawfully, fairly and in a transparent way.

ii)     Collected only for valid purposes and is compatible with those purposes.

iii)    Collected in a way that is relevant to the purpose and limited to those purposes.

iv)    Accurate and kept up to date.

v)     Maintained only for as long as necessary for recruitment processes.

vi)    Kept securely and protected against unauthorised or unlawful processing and against loss or destruction using appropriate technical and organisational measures.

What Data do we hold?

i)       The data you have provided to us in your curriculum vitae (C.V.) and the personal data contained in your covering letter.

ii)     Any data you provide to us during interviews.

iii)    Any personal data provided to us about you by your referees.

iv)    Any data created by us internally regarding your recruitment.

How is your Personal Data Collected?  

We collect personal data about candidates from the following sources:

i)       The candidate.

ii)     The named referees.

iii)    Publicly accessible sources.

How we will use your data? 

We will use your personal data to:

i)       Assess your skills, qualifications, and suitability for the role.

ii)     To conduct reference checks.

iii)    To carry out the recruitment process.

iv)    To keep records related to our recruitment processes.

v)     To comply with legal requirements.

Data Retention Policy

We will securely destroy your personal data in accordance with our Data Retention Policy.

RecordStatutory PeriodLegislative BasisRetention Period

Successful Candidates

Duration of employment and any internal retention period set for DP purposes.

Terms of Employment (Information) Act, 1994.

Duration of employment. Plus six years.

Unsuccessful Candidates

Retention period set internally for DP purposes.

Legitimate reason (GDPR).

12 months.

Unsuccessful Candidate.

Retention period set internally for DP purposes. Where written consent is given by the candidate to process data for future vacant roles.

Consent. (GDPR).

3 years.

Rights of Access, Correction, Erasure and Restriction

Request Access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold.

Request Correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data corrected.

Request Erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.

Object to Processing of your personal data where we are relying on a legitimate interest (or those of a third party) and you want to object to processing on this ground.

Request the Restriction of Processing of your personal data. You can ask us to suspend the processing of personal data.

Request the transfer of your personal data to another party.


If you want to complain about our use of your information, please send an email with the details of the complaint to

You also have a right to lodge a complaint with the Data Protection Commission (“DPC”), the Irish Data Protection Regulator. You can access further information on your rights via the  DPC website or contact the DPC using the following details:

Office of the Data Protection Commission

Canal House,

Station Road,


Co. Laois.

P32 AP23.