Privacy notice
Last updated: 28 October 2026
Who we are
The Concertina Cruinniú is organised by Oidhreacht an Chláir (OaC), which is the controller of the personal data described here. Contact: eolas [at] oac.ie or by post at OaC, Flag Road, Miltown Malbay, Co. Clare.
What we collect
When you register we collect your name, email address, phone number (optional), postal address, county, whether you are under 18, and your chosen grade. For under-18s we also record the name of the parent or guardian. We record the amount and status of your payment. Registrations paid by cheque, cash or phone are entered by our organisers, who may add a free-text note. We do not hold your card details.
Why we collect it and our legal basis
- To process your registration, assign you to a class, take payment and send you a confirmation: performance of a contract with you (Article 6(1)(b) GDPR).
- To keep payment and accounting records: a legal obligation (Article 6(1)(c)).
- To keep our site and registration form secure, including rate limiting and bot checks (Cloudflare Turnstile on the registration form and admin login): our legitimate interest (Article 6(1)(f)).
Under-18s
Anyone under 18 must be registered by a parent or guardian, whose name we record.
Who we share it with
We do not sell your data. We share it only with:
- Stripe, which takes card payments on its own secure pages. Your card details are entered at Stripe and never seen or stored by us. Stripe is an independent controller of the payment, fraud-prevention and legal-compliance data it holds, under its own privacy notice (stripe.com/ie/privacy). It may transfer data outside the EEA under appropriate safeguards.
- Digital Alchemy, who host this website and provide our email service. They are our processor and act only on our instructions.
- Our organisers, where needed to run the festival. A copy of each paid registration is emailed to the organisers' mailbox with your name, email and payment reference, but not your phone number or address.
How long we keep it
Six months after the festival ends we anonymise your name, email, phone number, address, parent/guardian name and any notes. Payment records (amount, date and Stripe reference) are kept for six years because Irish tax law (section 886 of the Taxes Consolidation Act 1997) requires it. We may keep anonymised statistics (grade, county and age group). Database backups are deleted within 30 days, and organiser emails older than six months are deleted.
Your rights
You can ask us for access to your data, or to correct, erase or restrict its use. You can ask for the data you supplied in a portable format, object to how it is used, or withdraw consent where we rely on it. Email eolas [at] oac.ie or write to us at OaC, Flag Road, Miltown Malbay, Co. Clare, and we will reply within one month. You may also complain to the Data Protection Commission (dataprotection.ie).