top of page

Privacy policy

1

Karo Privacy Notice

We are committed to protecting the privacy of those with whom we interact, and we recognise the need to

respect and protect information that is collected or disclosed to us (called "Personal Information", explained

below).

This Privacy Notice is intended to tell you how we collect and use your Personal Information to give you the information you need at a glance, with the option of following a link if you want to find out more. If you still

can't find the information you need, you can contact us by reference to the details set out in section 1 below.

Please click on the links below for further information on our privacy practices:

1. Who we are?

2. What is Personal Information, and which Personal Information do we collect about you?

3. How is your Personal Information collected?

    Personal Information that you provide directly

    Automated technologies or interactions

    Third parties or publicly available sources

4. How do we use your information?

5. To whom do we disclose your information?

6. What do we do to keep your Personal Information secure?

7. Data Retention – How long will we store/keep your Personal Information

8. Accessing your Personal Information and other rights you have

9. Third-Party Links

10. Cookies

11. Your Choices (e.g. marketing related emails or otherwise)

12. Changes to this Privacy Notice

This Privacy Notice should be read in conjunction with the Karo Platform Terms & Conditions of Use found

at karo.ie/terms. The definitions in the Terms & Conditions are used throughout this privacy notice.- -

2

1. Who are we?

We are KARO HEALTHCARE LTD, trading as Karo ("Karo", "we", "us") and we act as a controller for the

purposes of European Economic Area data protection law and data protection and e-privacy laws

applicable in the United Kingdom (the "Data Protection Law"). We operate the Karo online and

marketplace platform and website at https://www.karo.ie (the "Platform").

We are a registered fee payer with the Information Commissioner's Office (616688 registration number).

Our Director, Odhran Ginnity is responsible for overseeing questions in relation to this Privacy Notice. If

you have any questions about this Privacy Notice, including any requests to exercise your legal rights,

please contact us using the following details:

FAO Odhran Ginnity

16 Main Street Blackrock

Dublin, Ireland

[email protected]

Our Platform connects Clients with our Workers through https://www.karo.ie and any other website or

application through which we may make the Platform and services available from time to time (our

"services"). This policy applies to you if you are a Member, Client, Worker, supplier, referee, visitor to our

Platform or applicant for a job with us. For the purposes of this policy:

- Members – a user of the Platform who completes a registration as a Member.

- Clients – a Member of the Platform who is a provider of healthcare services and operator of

healthcare facilities that is regulated by the Care Quality Commission, such as but not limited to, care

homes, hospitals, prisons.

- Workers – a Member of the Platform who is a Worker of Karo Staffing Ltd and a provider of healthcare

services, such as but not limited to, qualified nurses, doctors or care workers.

- Referee – a person who provides a personal or work reference for a Worker or an Applicant.

- Suppliers – business contacts in our supplier organisations.

- Platform Visitors – anyone who visits our Platform.

- Applicants – an individual who is applying for a job with us.

- Vacancy – a specific ad hoc rota vacancy within the healthcare sector commonly on a shift-by-shift

basis and "Vacancies" shall be construed accordingly.

- Assignments - an assignment entered into between Karo and the Client for the provision of services by

a Worker to the Client corresponding to a Vacancy.

2. What is Personal Information, and which Personal Information do we collect about you?

For the purposes of this Privacy Notice, "Personal Information" consists of any information that relates to

you and/or information from which you can be identified, directly or indirectly as defined under Data

Protection Law. For example, information which identifies you may consist of your name, address,

telephone number, photographs, location data, an online identifier (e.g. cookies identifiers and your IP

address) or to one or more factors specific to your physical, economic, cultural or social identity. When we

combine other information (i.e. information that does not, on its own, identify you) with Personal

Information, we treat the combined information as Personal Information.

We may collect use, store and transfer different kinds of Personal Information about you which we have

grouped together as follows:- -

3- -

4

Identity Data includes first name, maiden name (if applicable), last name, community username, title,

date of birth and gender, job title, a copy of a photographic identity document (such as a passport or

ID card), a photograph for incorporation into your profile on the Platform, a screenshot from any

applicable video-call between a Member (or their representative) and Karo, and, in respect of an

Worker, the applicable NMBI pin/reference/registration number.

Contact Data includes address, former addresses (where applicable), email address and telephone

number(s).

Career History and Education Data includes professional skills and experience, employment history,

academic and professional qualifications, certificates, training, competencies (clinical and medication),

reference information.

Employment Status Data includes status/right to work and work permit information.

Worker Profile Data includes job role, details of professional indemnity insurance cover, your ratings

submitted via our in-built ratings system, feedback relating to you, preferences.

Financial Data includes bank account details, direct debit mandate.

Technical Data includes internet protocol (IP) addresses, location data, username and password, usage

session dates and duration, page views, time zone setting and location, browser plug-in types and

versions, operating system and platform, the type of browser used while visiting our Platform, how

you use our Platform and the numbers of users who visit our website.

Services Data includes information about how you use our services, details of which services you have

received from us, choices you have made on the Platform (including, for example, settings and favorite

workers), information as to Vacancies posted and applied for, Assignments, cancellations, ratings,

reviews, responses to surveys and requests for feedback, information about your use of our services,

correspondence and communications with you and information about any complaints or enquiries you

make to us.

Community Data includes any information you send to other Members via the Platform's community

function.

Marketing and Communications Data includes your preferences in receiving marketing from us and

your communication preferences.

Special Categories of Data: we may collect the following special categories of Personal Information

about you:

o occupational health information including vaccination/immunisation status and history

("Occupational Health Data");

o the identity of your professional indemnity insurer which may indicate trade union

membership ("Trade Union Data"); and

o where a photographic ID is provided (for example by way of a copy of your passport, driving

licence or other photographic ID document) an inference may be made as to your race,

ethnicity and/or religious beliefs ("ID Data").

Criminal Offences Data: we will process information about a Workes's criminal convictions including

enquiries made of the Disclosure and Barring Service ("DBS") in respect of criminal convictions as part

of a Workers's membership application process, creation of a profile and use of the Platform.

Our Clients require us to carry out a criminal records check in order to satisfy themselves that there is

nothing in a Worker’s criminal convictions history which makes a Worker unsuitable for becoming a

Member of the Platform, using the Platform and/or applying for and carrying out an Assignment.

Therefore, we may collect a copy of your DBS Certificate, your DBS Certificate number and DBS- -

5- -

6

Update Service Number. We may also ask you to provide a statement about the information

contained in your DBS Certificate.

We have in place an appropriate policy document and safeguards which we are required by law to

maintain when processing such data.

We also collect and use aggregated, anonymous or pseudonymised data, such as statistical or demographic

data. If we combine any of this data with your Personal Information so that it can directly or indirectly

identity you, we treat the combined data as personal data which will be used in accordance with this

Privacy Notice.

3. How is your Personal Information collected?

We use different methods to collect data from and about you.

A. Members

Personal Information that you provide directly to us. You may give us your Identity Data, Contact

Data, Marketing and Communications Data, by filling in our Platform registration form, creating an

account and profile or by corresponding with us by email, phone or otherwise. We collect Services

Data when we correspond with you about our services and when you use the Platform.

Automated technologies or interactions. When you interact with our Platform, we may automatically

collect Technical Data about your equipment, browsing actions and patterns. We collect this Personal

Information by using cookies and other similar technologies, and our analytics providers. Please see

section 10 below.

B. Clients

Personal Information that you provide directly to us. You may give us your Identity Data, Contact

Data, Financial Data, Marketing and Communications Data, by filling in our Platform registration form,

creating an account and profile, updating and adding to your profile, using the Platform or by

corresponding with us by email, phone or otherwise. We collect Services Data when we correspond

with you about our services and when you use the Platform.

Automated technologies or interactions. When you interact with our Platform, we may automatically

collect Technical Data about your equipment, browsing actions and patterns. We collect this Personal

Information by using cookies and other similar technologies, and our analytics providers. Please see

section 10 below.

Third parties or publicly available sources. We may collect your Identity Data and Contact Data from

publicly available sources such as Companies House and the CQC.

C. Workers

Personal Information that you provide directly to us. You may give us your Identity Data, Contact

Data, Career History and Education Data, Employment Status Data, Worker Profile Data, Financial Data,

Special Categories of Data, Criminal Offences Data, Marketing and Communications Data, by filling in- -

7

our Platform registration form, creating an account and profile, updating and adding to your- -

8

profile, using the Platform or by corresponding with us by email, phone or otherwise. We collect

Services Data when we correspond with you about our services and when you use the Platform.

Automated technologies or interactions. When you interact with our Platform, we may automatically

collect Technical Data about your equipment, browsing actions and patterns. We collect this Personal

Information by using cookies and other similar technologies, and our analytics providers. Please see

section 10 below.

Third parties or publicly available sources. We may receive Identity Data, Career History and

Education Data from third parties such as your Referee and from publicly available sources such as

LinkedIn, the NMC. We may also receive Criminal Offences Data from a third party DBS check provider

if you have chosen to use our recommended provider to obtain a DBS Certificate and from the DBS

Update Service provided by the government if you have given chosen to give us access to that service.

D. Suppliers

We collect your Identity Data, Contact Data, Financial Data and Services Data when we correspond with

you about our services, and from publicly available sources such as Companies House.

E. Referee

We may obtain your Identity Data and Contact Data as well as information regarding your credentials as a

referee, details of your relationship and your opinions of a Worker or Applicant, either directly from you or

from an Worker or Applicant.

F. Platform Visitors

When you interact with our Platform, we may automatically collect Technical Data about your equipment,

browsing actions and patterns. We collect this Personal Information by using cookies and other similar

technologies, and our analytics providers. Please see section 10 below.

G. Applicants

Personal Information that you provide directly to us. You may give us your Identity Data, Contact

Data, Career History and Education Data, Employment Status Data and Financial Data by applying for a

job with us.

Third parties or publicly available sources. We may receive Identity Data, Contact Data and Career

History and Education Data from third parties such as your employer, Referee, your recruiter and

publicly available sources such as LinkedIn.

4. How do we use your information?

We will only use your Personal Information when Data Protection Law allows us to do so.

You can see a full list of the types of data we process, the purpose for which we process it and the lawful

basis on which it is processed in the table below.

Purposes for which we will use your Personal Information- -

9- -

10

We may use the Personal Information that we collect for the following purposes. For each purpose, we

describe the legal bases we rely on to justify such use of your Personal Information.

Category Purpose/Activity Type of data Legal basis

Clients To register you or your

employer as a Client

a. Identity Data

b. Contact Data

Necessary for

performance of a

contract with you

Clients To provide you with our services

including:

• operating the Platform;

• allowing you to

communicate with other

Members;

• allowing you to post

Vacancies and find

WORKERs to fill those

Vacancies;

• managing payments,

fees and charges

including via Payment

Processor(s); and

• collecting and seeking to

recover money owed to

us.

a. Identity Data

b. Contact Data

c. Financial Data

d. Community Data

Necessary for:

i. performance of

a contract with

you;

ii. our legitimate

interests to

operate the

Platform and

those of other

Members; and

iii. necessary for our

legitimate interests

(to recover debts

due to us).

Workers To register you as a Worker

including making enquiries of

third parties, for example, via a

Verification Services Provider

(see section 5 below).

a. Identity Data

b. Contact Data

c. Career History

and Education

Data

d. Employment

Status Data

e. WORKER

Profile Data

Necessary for

performance of a

contract with you- -

11

Workers To provide you with our services

including:

• operating the Platform;

• allowing you to amend

your profile;

• allowing you to

communicate and interact

with other Members;

• allowing you to apply for

Vacancies, accept

invitations from Clients

and enter into

Assignments with Clients;

• managing payments, fees

and charges including via

the Payment Processor;

and

• collecting and seeking to

a. Identity Data

b. Contact Data

c. Financial Data

d. Services Data

e. Career History

and Education

Data

f. Employment

Status Data

g. WORKER

Profile Data

h. Community Data

Necessary for:

i. performance of

a contract with

you;

ii. our legitimate

interests to

operate the

Platform and

those of other

Members; and

iii. our legitimate

interests (to

recover debts due

to us).- -

12

recover money owed to us.

Workers For compliance purposes –

Clients (as healthcare

institutions) will need to access

the personal data of an

WORKER via the Platform in

order:

• to assess the WORKER

against the compliance

standards set by the

Client organisation

ahead of arrangement

of an Assignment; and

• to maintain records of

WORKERs with whom

the Client has entered

into Assignments.

a. Identity Data

b. Contact Data

c. Profile Data

d. Referee Data

Necessary for:

i. performance of

a contract with

you;

ii. our legitimate

interests to

operate the

Platform and

those of other

Members.

Clients

and

Worke

rs

To communicate with

relevant regulatory bodies

including the Nursing and

Midwifery Council and/or the

Care Quality Commission.

a. Identity Data

b. Contact Data

c. Worker Profile Data

d. Services Data

Necessary for:

i. performance of

a contract with

you;

ii. to comply

with a legal

obligation;

iii. for our

legitimate

interests and

those of any

applicable

regulators.

Membe

rs,

Clients

and

Workers

To manage our relationship

with you which will include:

• n oti f y i n g y o u a b o u t

changes to our Terms and

Conditions or Privacy

Notice; and

• asking you to leave a

r e v i e w o r p r o v i d e

feedback.

a. Identity Data

b. Contact Data

c. Marketing and

Communicatio

ns Data

d. Services Data

Necessary for:

i. performance of

a contract with

you;

ii. to comply

with a legal

obligation;

iii. our legitimate

interests in

keeping our

records updated

and studying

how Members

use our Platform

and services.- -

13

Applicant

s

To consider you for a role, if

you are applying for a job with

us

a. Identity Data

b. Contact Data

c. Career History

and Education

Data

d. Employment

Status Data

Necessary:

i. To take steps in

order to enter a

contract with

you;

ii. for our

legitimate

interests in

finding- -

14

e. Financial Data employees;

iii. to comply with

our legal

obligations, such

as to make

reasonable

adjustments.

Referees To perform our services to

Workers and Clients and to

enable us to obtain your

opinions on an Applicant.

a. Identity Data

b. Contact Data

Necessary for our

legitimate interest in

providing our services to

Clients and WORKERs, and

obtaining information

about Applicants

Suppliers To carry out our contractual

obligations to you, if you are

our supplier or subcontractor,

including to manage our

payments to you.

a. Identity Data

b. Contact Data

c. Financial Data

d. Services Data

Necessary for our

legitimate interests in

receiving services from our

suppliers to ensure our

business is run efficiently.

Membe

rs and

Platfor

m

Visitors

For security purposes and to

administer our Platform – to

maintain and enhance the

Platform, to ensure that

content from it is presented in

the most effective manner for

you and your computer, and to

enhance the user experience

(including troubleshooting,

data analysis, testing, system

maintenance, support,

reporting and hosting of data).

Technical Data Necessary:

i. for our legitimate

interests in

running our

business, to

ensure the

security of our

systems, to assist

us in the

provision of

administration

and IT services,

network security,

to prevent fraud

and in the

context of a

business

reorganisation or

company

restructuring

exercise;

ii. for performance

of a contract with

you;

iii. to comply

with a legal

obligation.- -

15

Membe

rs,

Clients

and

Workers

To provide you with marketing

information relating to the

services and and activities

which you request from us or

which we feel may be of

interest to you,

a. Identity Data

b. Contact Data

c. Services Data

d. Marketing and

Communicatio

ns

Necessary for our

legitimate interests to

develop our services,

grow our business and

inform our marketing

strategy.- -

16

and relevant Platform

content, and to measure or

understand the effectiveness

of the marketing we serve to

you.

Data

e. Technical Data

All

categori

es

Business and analysis purposes

- for business monitoring,

assessment and analysis of our

Clients, Workers and Members,

to develop our business

strategy, record keeping

including maintaining our

accounts, complying with good

practice and for other

administrative, operational and

security reasons, and to seek

your thoughts and opinions on

the services we provide.

a. Identity Data

b. Contact Data

c. Services Data

d. Marketing and

Communicatio

ns Data

e. Technical Data

Necessary:

i. for our legitimate

interests in

running our

business

efficiently,

successfully and

in order to keep

our records

updated;

ii. to comply

with a legal

obligation.

Membe

rs and

Platfor

m

Visitors

To improve the Platform and

the services, services,

customer relationships and

experiences.

a. Technical Data

b. Services Data

Necessary for our

legitimate interests to in

understanding how

Members use our services,

keeping the Platform

updated, and developing

our business and to inform

our marketing strategy.

Membe

rs,

Workers

, Clients

and

Referee

s

As required in special

circumstances such as a police

or other legal investigation or

serious complaint requiring a

Client, a Worker and/or Karo to

release personal data.

a. Identity Data

b. Contact Data

c. Worker Profile Data

d. Employment

Status Data

e. Career History

and Education

Data

f. Services Data

g. Marketing and

Communicatio

ns Data

h. Technical Data

i. Special Categories

of Data

Necessary for:

i. performance of

a contract with

you;

ii. c o m p l i a n c e

w i t h a l e g a l

obligation;

iii. p e r fo r m a n c e

of a task in the

p u b l i c

interest;.

iv. the

establishment,

exercise or

defence of legal

claims or

whenever courts

are acting in tier

judicial capacity;- -

17

Workers As required in limited

circumstances, when a Client

must use personal data to help

it

a. Identity Data

b. Contact Data

c. Worker Profile Data

Necessary for:

i. Performance of

a contract with

you;- -

18

Please be aware that we are not responsible for the data processing activities of others, such as Clients.

Marketing communications

Where permitted in our legitimate interest or with your prior consent where required by Data Protection

Law, we will use your Personal Information for marketing analysis and to provide you with promotional

update communications by email, telephone or post about our products and services. For further

information on this, see the 'Your Choices' section of this Privacy Notice.

Combining Personal Information

We may combine the Personal Information that we collect from you to the extent permitted by applicable

law. For example, we may combine various different databases that contain your Personal Information to

carry out internal analysis of our Member base and how the services are used, and to provide better

services and more personalised content (such as marketing).

Change of purpose

Where we need to use your Personal Information for another reason other than for the purpose for which

we collected it, we will only use your Personal Information where that reason is compatible with the

original purpose. If we need to use your Personal Information for an unrelated purpose, we will notify you

and we will explain the legal basis which allows us to do so.

5. To whom do we disclose your information?

We will only use your Personal Information for our internal business purposes, some of which are

mentioned above. We may disclose your information to the following entities:

I. Clients

We may need to disclose Worker's Personal Information to Clients as part of the services and use

of the Platform. For example, we will share Workers' Identity Data, Contact Data, Worker Profile

Data, Employment Status Data and Career History and Education Data with Clients when you

apply for a Vacancy (as defined in our Terms and Conditions). We will also share limited Identity

Data with Clients to enable them to invite Workers to apply for Vacancies.

discharge its functions relating

to providing care to patients

and relatives and looking after

their welfare.

d. Services Data

e. Technical Data

f. Marketing and

Communicatio

ns Data

ii. Compliance

with a legal

obligation;

iii. Public interest.

All To prevent and detect crime, a. Identity Data Necessary to comply with

categorie

s

fraud or corruption and to meet b. Contact Data our legal obligations

our legal, regulatory and ethical c. Technical Data

responsibilities d. Services Data- -

19

II. Service Providers- -

20

We use third party service providers to help us to administer certain activities and services on our

behalf, such as IT, hosting and cloud services, payment processing services, verification services

marketing services, customer support services and DBS check services. We may share Personal

Information about you with such third party service providers solely for the purpose of enabling

them to perform services on our behalf and they will operate only in accordance with our

instructions. Here are examples of third-party service providers we use:

a. IT Service Provider and Administration Services – we use salesforce.com, inc. and Amazon

Web Services, Inc. to provide us with IT, hosting and cloud services.

b. Marketing and Analytics Services – we use Segment.io, Inc. and Facebook to provide us with

marketing and analytics services including Facebook Pixel and Custom Audiences.

• Facebook Pixel is a cookie (explained below at section 10) which we use to gather

information about use of our Platform. Facebook's cookies policy can be found here.

• We use Custom Audiences to tailor our advertising to people who are likely to be

interested in us. The data processing terms which apply to Facebook when we use

Custom Audiences are found here.

c. Payment Processing Services – we use third party online payment processors to collect,

process, hold and/or remit payments. Currently we use GoCardless, Mangopay S.A. and

Hpillars Limited, trading as Telleroo. We may also use our bank which is currently National

Westminster Bank Plc.

d. Verification Services – we use a third party online identity verification service provided by

Onfido Ltd.

e. Customer Support Services – we use Voigue Pty Ltd to provide out of hours contact and

customer support services, a company located in Australia with services performed in Sri

Lanka.

f. Disclosure and Barring Check Services – we may refer you to a third party DBS check provider

if you are an WORKER who wishes to register with the Platform and you do not have a valid

Enhanced DBS Certificate. Currently we use Complete Background Screening Ltd.

g. Onboarding Workers and Managing Compliance and DBS Functions – we use A&J Global

Associates, a third party service provider based in Bangladesh.

III. Anonymous statistics

We prepare and develop anonymous, aggregate or generic data and statistics for various reasons

(such as aggregate usage statistics including "page views" on the Platform analysing how users use

our content and for marketing). As this data is anonymous (i.e. you cannot be identified from it)

we do not consider this information to be Personal Information. As such, we may share it with any

third party.

IV. Third parties when required by law

We will disclose your Personal Information to comply with applicable law or respond to valid legal

process, including from our regulators, law enforcement or other government agencies (in which

case such agencies or regulators will be acting as controllers as well); to protect the users of the

Platform (e.g. to prevent spam or attempts to defraud them); to operate and maintain the security

of the Platform (e.g. to prevent or stop an attack on our systems or networks); or to protect our

rights or property.

V. Other Parties in Connection with Corporate Transactions- -

21

We may disclose your Personal Information to a third party in the event that (a) we buy any

business or assets, in which case we will disclose your Personal Information to the prospective

buyer of such business or assets subject to the terms of this Privacy Notice; (b) all or substantially

all of our business or assets are or are intended to be sold or otherwise assigned to another

entity.

VI. Other Parties at Your Direction

We may share Personal Information about you with third parties when you request such sharing,

such as to prospective employers, or to your legal or other professional advisers.

6. What do we do to keep your information secure?

We have put in place appropriate physical and technical measures to safeguard your Personal Information.

In addition, we limit access to your Personal Information to those employees, agents, contractors and

other third parties who have a business need to know. They will only process your Personal Information on

our instructions and they are subject to a duty of confidentiality. When we use service providers to assist

us in processing your Personal Information, we have written contracts in place with such service provider

which means that they cannot do anything with your Personal Information unless we have instructed them

to do it.

However, please note that although we take appropriate steps to protect your Personal Information, no

website or transmission of data, computer system or wireless connection is completely secure and

therefore we cannot guarantee the security of your Personal Information.

International Transfer of Data

The Personal Information that we collect from you may be stored and processed in your region, or

transferred to, stored at or otherwise processed outside the European Economic Area ("EEA").

By using the Platform and/or providing us with your Personal Information, you acknowledge that we will

collect, transfer, store and process your information outside the EEA. We will take all steps reasonably

necessary to ensure that your Personal Information is kept secure and treated in accordance with this

Privacy Notice.

Where we transfer your Personal Information outside the EEA to third parties, we will ensure that

appropriate transfer agreements and mechanisms, such as the EU Standard Contractual Clauses, are in

place to help ensure that our third party service providers provide an adequate level of protection to your

Personal Information. We will only transfer your Personal Information outside the EEA in accordance with

applicable laws or where you have given us your consent to do so, where required by Data Protection Law.

We may transfer your personal information outside the EEA:

• In order to store it.

• In order to enable us to provide goods or services to you and fulfil our contract with you. This

includes processing of payment details or the provision of support services.

• Where we are legally required to do so.

We may transfer your personal information to the following countries and using the following safeguards

outside the EEA.- -

22- -

23

7. Data Retention – How long we will store/keep your Personal Information

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we

collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting

requirements. We may retain your personal data for a longer period in the event of a complaint or if we

reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and

sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your

personal data, the purposes for which we process your personal data and whether we can achieve those

purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

We retain Workers' Personal Information for seven years after deletion of their account. We retain Clients'

Personal Information for seven years following the last contact with such Client.

When your Personal Information is no longer required for the purpose it was collected or as required by

applicable law, it will be deleted and/or returned to you in accordance with applicable law.

In some circumstances you can ask us to delete your Personal Information (see section 8 below).

8. Accessing your Personal Information and other rights you have

We will collect, store and process your Personal Information in accordance with your rights under any

applicable Data Protection Laws. Under certain circumstances, you have the following rights in relation to

your Personal Information:

I. Subject Access - you have the right to request details of the Personal Information which we hold about

you and copies of such Personal Information.

II. Right to Withdraw Consent – where you have consented to our processing of your Personal

Information, you have the right to withdraw such consent at any time. In the event you wish to

withdraw your consent to processing, please contact us using the details provided in section 1.

III. Data Portability – you may, in certain circumstances, request us to port (i.e. transmit) your Personal

Information directly to another organisation or to you.

IV. Rectification – we want to ensure that the Personal Information about you that we hold is accurate

and up to date. If you think that any information we have about you is incorrect or incomplete, please

let us know. To the extent required by applicable laws, we will rectify or update any incorrect or

inaccurate Personal Information about you.

V. Erasure ('right to be forgotten') - you have the right to have your Personal Information 'erased' in

certain specified situations.

VI. Restriction of processing – you have the right in certain specified situations to require us to stop

processing your Personal Information.

VII. Object to processing – You have the right to object to specific types of processing of your Personal

Information, such as, where we are processing your Personal Information for the purposes of direct

marketing.

VIII. Prevent automated decision-taking – in certain circumstances, you have the right not to be subject to

decision being taken solely on the basis of automated processing.

Enforcing your rights- -

24

If you wish to enforce any of your rights under applicable Data Protection Laws, then please see section 1

above. We will respond to your request without undue delay and by no later than one month from receipt

of any such request, unless a longer period is permitted by applicable data protection laws, and we may

charge a reasonable fee for dealing with your request which we will notify to you. Please note that we will

only charge a fee where we are permitted to do so by applicable Data Protection Laws.

Complaints

If you are concerned that we have not complied with your legal rights under applicable data protection

laws, you may contact the Data Protection Commissioners Office (https://www.dataprotection.ie/en/

contact/how-contact-us) which is the data protection regulator in Ireland which is where we are located.

The DPC’s address is:

21 Fitzwilliam Square South

Dublin 2

D02 RD28

Ireland

Alternatively, if you are based outside the The Republic of Ireland, you may contact your local data

protection supervisory authority.

9. Third-Party Links

Our Platform may contain links to other third party websites that are not operated by us. These linked sites

and applications are not under our control and as such, we are not responsible for the privacy practices or

the content of any linked websites and online applications. If you choose to use any third party websites,

any Personal Information collected by the third party’s website will be controlled by the Privacy Notice of

that third party. We strongly recommend that you take the time to review the privacy policies of any third

parties to which you provide Personal Information.

10. Cookies

What are cookies?

We may use cookies on our website. Cookies are small text files that can be read by a web server in the

domain that put the cookie on your hard drive. Cookies are assigned to and stored in a user's internet

browser on a temporary (for the duration of the online session only) or persistent basis (cookie stays on

the computer after the internet browser or device has been closed). Cookies collect and store information

about a user’s preferences, product usage and content viewed which allows for us to provide users with an

enhanced and customized experience when engaging with the website.

See our Cookies Policy - karo.ie/terms - for further information on cookies and how we use them.

11. Your Choices (e.g. marketing-related emails or otherwise)- -

25

When you request information on or from the website, or otherwise communicate with us, we may use

your Personal Information (such as your contact details (e.g. name, address, email address, telephone

number) to send you marketing-related correspondence by email related to our products or services.

When we process your Personal Information for marketing purposes, we do so on the basis that it is in our

legitimate interests to use your Personal Information for these purposes or with your consent, where

required by Data Protection Law.

We may also use your Personal Information to personalise and to target more effectively our marketing

communications to ensure, to the extent possible, that any marketing-related correspondence is relevant

to you.

You can object to further marketing at any time by clicking "Unsubscribe" from any marketing or

promotional email you receive from us by sending us an email to [email protected]

12. Changes to this Privacy Notice

It also is important that you check back often for updates to the Privacy Notice, as we may change this

Privacy Notice from time to time. The “Date last updated” legend at the bottom of this page states when

the notice was last updated, and any changes will become effective upon our posting of the revised Privacy

Notice.

We will provide notice to you if these changes are material and, where required by applicable law, we will

seek your consent. We will provide this notice by email or by posting notice of the changes on our website.

Date last updated: 5th February 2021

bottom of page