Cookie Policy

A&L Goodbody takes data privacy seriously. This policy sets out how we, as a data controller, collect and process personal data about:

  • visitors to our websites
  • individuals who apply for jobs through our website
  • subscribers to or users of our online services or marketing

This Cookie Policy also sets out information about data subject rights and our obligations under data protection law and may be read in conjunction with our Privacy Statement.

WHAT IS A COOKIE?

A 'cookie' is a small data file that is placed on your computer or mobile device ("Device").  It allows a website to remember your actions or preferences until the cookie is deleted or expires. Some of the cookies A&L Goodbody uses are essential for our website to work.  Our "website" includes this website, all our associated sites and our social media pages.  We also use some non-essential cookies to collect information to help us improve the website. 

Cookies can be stored for varying lengths of time on your browser or device.  Session cookies are generally deleted from your computer or device when you close your browser.  Persistent cookies will remain stored on your computer or device until deleted or until they reach their expiry date as detailed in the tables below.

WHY WE USE COOKIES 

We use cookies to:

  • help improve your experience browsing our website
  • collect information about visitors’ use of the website operations, like website navigation
  • analyse visitor numbers and behaviours, such as what pages are frequently visited
  • assess the success of our communications
  • target suitable advertising messages
  • understand which of our advertising partners has helped us reach out to new customers, or have promoted us on their websites

More details on the purpose of each cookie are set out in the tables below.

COOKIES AND YOUR PERSONAL DATA

The information we collect may include some personal data.  Our use of strictly necessary cookies involves processing the following personal data:

  • your unique user ID
  • your IP address
  • your approximate location based on your IP address at the time you are browsing

The lawful basis for processing of personal data relating to "strictly necessary" cookies is complying with our legal obligations and our legitimate interests to secure our website and make it available to you when processing that personal data.

Other (optional) cookies process the following personal data:

  • the date, time and duration of visits
  • the number of pages viewed
  • the amount of time spent on the website
  • your device information
  • your IP address

The lawful basis for processing of personal data relating to optional cookies is our legitimate interests in maintaining, operating and improving our websites, providing our services to clients and managing and improving our business and services, provided such interests are not overridden by the rights and interests of the data subjects concerned.  

Please see the section below entitled Managing and Disabling Cookies and withdrawing your consent for more information on how to provide or withdraw your consent to the placing of cookies at any time. This policy also sets out information about data subject rights and our obligations under data protection law when processing your personal data.

TYPES OF COOKIES USED AND THIRD PARTIES 

The tables below explain the cookies we use, their purpose, duration and whether the cookie is placed by us or a third party.  Not all of these cookies apply to all of our websites.  You can check which type of cookies apply to each website using the cookie panel on the relevant website.  Some cookies are referred to as 1st party cookies meaning they are set by our website.  3rd party cookies are set by a domain other than our website. 3rd party cookies are covered by the third parties’ cookie policies. 

When we send an email as part of our A&L Goodbody updates, the email includes cookies and similar technologies to help us better understand how subscribers interact with our emails, such as whether they are opened by the subscriber. If you do not consent to us setting these cookies, please unsubscribe from our email list and delete any emails that you have received.

Strictly Necessary Cookies

These cookies are necessary for the website to function and to comply with our legal obligations and cannot be switched off in our systems. They are usually only set in response to actions made by you to request services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the website will not then work.

Name

Purpose

Expiry

1st Party / 3rd Party Cookie

OptanonConsent

This cookie is set by the cookie management tool provided by OneTrust. It stores information about the categories of cookies the website uses and whether you have given or withdrawn consent for the use of each optional category of cookie. 

6 months

1st Party 

OptanonAlertBoxClosed

This cookie is set by the cookie management tool provided by OneTrust. It is set after you have seen a cookie information notice and in some cases only when they actively close the notice down. It enables our website not to show you the message more than once. 

6 months

1st Party

exp_csrf_token

This cookie is associated with the website content management system Expression Engine which is used by our corporate website. It is a security cookie used to identify you and prevent Cross Site Request Forgery attacks.

365 days

1st Party

exp_last_visit

This cookie is used by our corporate website and records the date of your last visit. 

365 days

1st Party

exp_last_activity

This cookie is used by our corporate website and records the time of the last page load. 

365 days

1st Party

ASPSESSIONIDXXXXXXXX

This cookie is used to maintain an anonymised user session by the server. Session id, used to associate a logged in user with their data.

Session (max 30 minutes)

1st Party

MoodleSession…

Keeps Moodle session alive (for authenticated users (KnowledgePlus only)

Session 

1st Party

SimpleSAMLSessionID

Stores SAML session id, to keep the single-sign-on alive, for authenticated users (KnowledgePlus only)

Session 

1st Party

SimpleSAMLAuthToken

SAML authentication token to keep single-sign-on alive for authenticated users (KnowledgePlus only)

Session 

1st Party

MDL_SSP_SessID

Stores Moodle session id, which is needed to keep the single-sign-on alive, for authenticated users  (KnowledgePlus only)

Session 

1st Party

MDL_SSP_AuthTokenSP

Stores Moodle single-sign-on token (needed to keep single-sign-on alive) for authenticated users (KnowledgePlus only)

Session

1st Party

drupalauth4ssp

SAML authentication token (needed to keep single-sign-on alive) for authenticated users (KnowledgePlus only)

Session

1st party

SSESS…

Keeps Drupal session alive for authenticated and anonymous users (KnowledgePlus only)

Session for an authenticated user.

23 days for unregistered user. 

1st Party

has_js

Drupal uses this cookie to indicate whether or not the visitors browser has JavaScript enabled. (KnowledgePlus only)

Session 

1st Party

Performance Cookies

These are optional cookies.  These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our website.  They help us to know which pages are the most and least popular and see how visitors move around the website. All information collected in relation to performance cookies is aggregated and is not processed by us in a way that would allow us to identify any users .  If you do not allow these cookies we will not know when you have visited our website, and will not be able to monitor its performance.

Name

Purpose

Expiry

1st Party / 3rd Party Cookie

Exp_tracker

This cookie is associated with the website content management system Expression Engine. 

30 minutes 

1st Party

_VxSessionId

This cookie is used by Vuture to identify your IP address and track your website journey on our corporate website. 

Session (max 30 minutes)

1st Party

_hjIncludedInPageviewSample

This cookie is set by Hotjar to confirm whether you are included in the data sampling defined by our corporate website's pageview limit.

Session (max 30 minutes)

3rd Party (Hotjar)

_hjAbsoluteSessionInProgress

This cookie is used by Hotjar to detect the first pageview session of a user visiting our corporate website. This is a True/False flag set by the cookie.

Session (max 30 minutes) 

3rd Party (Hotar)

_hjTLDTest

When the Hotjar script executes, Hotjar try to determine the most generic cookie path to be used, instead of the page hostname. This is done so that cookies can be shared across subdomains (where applicable). To determine this, Hotjar try to store this cookie for different URL substring alternatives until it fails. After this check, the cookie is removed.

Session (max 30 minutes)

3rdPParty (Hotjar)

_gid

This cookie is set Google Analytics and used to distinguish the visitor's journey on our website.

24 hours

1st Party

_ga

This cookie is set by Google Analytics and used to distinguish visitors to our website.

2 years 

1st Party 

_hjid

This is a cookie set by Hotjar when you first land on a website. It is used to persist the Hotjar User ID, unique to that website on the browser. This ensures that behaviour in subsequent visits to the same website will be attributed to the same user ID.

365 days

1st Party 

_gat

This cookie is associated with Google Universal Analytics, to throttle the request rate - limiting the collection of data on high traffic sites.

10 minutes

1st Party 

Functional Cookies

These are optional cookies.  These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

Name

Purpose

Expiry

1st Party / 3rd Party Cookie

vuid

This domain is owned by Vimeo. The main business activity is: Video Hosting/Sharing and this cookie applies where we have embedded a video on our website.

730 days (2 years)

3rd Party (Vimeo.com)

Targeting Cookies

These are optional cookies.  These cookies may be set through our website by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.  If you do not allow these cookies, you will experience less targeted advertising.

Name

Purpose

Expiry

1st Party / 3rd Party Cookie

test_cookie

Used by Google Doubleclick to check if the user's browser supports cookies.

Session 

(max 30 minutes)

3rd Party (Doubleclick.net)

IDE

Used by Google DoubleClick to register and report the website user's actions after viewing or clicking an advertiser's ad with the purpose of measuring the efficacy of an ad and to present targeted ads to the user. 

390 days

3rd Party (Doubleclick.net)

sc_anonymous_id

This domain is owned by Soundcloud, a German company providing social sharing services centred around soundclips. The data that is collected through its services can be used for profiling and targeted advertising.

10 years

3rd Party (Soundcloud.com)

NID

This cookie contains a unique ID Google uses to remember your preferences and other information, such as your preferred language (e.g. English),), and whether or not you wish to have Google’s SafeSearch filter turned on.  

183 days

3rd Party (Google.com)

_gat_gtag_xxxxxxxxxxxxxxxxxxxxxxxxxxx

Google Analytics cookies to track performance. 

1 minute

1st Party

_gat_xxxxxxxxxxxxxxxxxxxxxxxxxx

Google Analytics cookies to track performance. 

Session (max 30 minutes)

1st Party 

YSC

This cookie is set by the YouTube video service on any of our websites with embedded YouTube video.

Session

(Max 30 minutes) 

3rd Party (Youtube.com)

GPS

Used to register a unique ID to enable tracking based on geographical GPS location for embedded YouTube videos. 

A few seconds

3rd Party (Youtube.com)

VISITOR_INFO1_LIVE

A cookie that YouTube sets that measures your bandwidth to determine whether you get the new or the old player interface.

180 days

3rd Party (Youtube.com)

DISCLOSURE OF YOUR INFORMATION

In addition to the 3rd parties referred to in the tables above, we may disclose personal data to:

  • third parties, including cloud service providers, who provide a service to us
  • a public authority in the event that we are required to do so by law
  • a third party where we are under a legal obligation to transfer it to that third party or where we provide it on behalf of a client who is under such legal obligation
  • a prospective seller or buyer of any of our assets or business
  • a third party where it is necessary to protect the vital interests of the data subject or another natural person

To the limited extent that it is necessary to transfer personal data outside of the EEA, we will ensure appropriate safeguards are in place to protect the privacy and integrity of such personal data, including standard contractual clauses under Article 46.2 of the GDPR. Please contact us if you wish to obtain information concerning such safeguards (see Contact Us below).

LINKS TO OTHER SITES

Our website may, from time to time, contain links to and from other websites. If you follow a link to any of those websites, please note that those websites have their own cookie policies and we do not accept any responsibility or liability for those policies. Please check those policies before you submit any personal data to those websites.

DATA SUBJECT RIGHTS

To the extent that we process personal data as a result of your cookie preferences and we are a controller of that personal data, you may request access to, rectification, or erasure of your personal data, or restriction of processing or object to processing of your personal data, as well as the right to data portability. In each case, these rights are subject to restrictions as laid down by law. The following is a summary of your rights:

  • the right of access enables you to receive a copy of your personal data
  • the right to rectification enables you to correct any inaccurate or incomplete personal data we hold about you
  • the right to erasure enables you to ask us to delete your personal data in certain circumstances
  • the right to restrict processing enables you to ask us to halt the processing of your personal data in certain circumstances
  • the right to object enables you to object to us processing your personal data on the basis of our legitimate interests (or those of a third party)
  • the right to data portability enables you to request us to transmit personal data that you have provided to us, to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party, where technically feasible

You have the right to lodge a complaint with the Data Protection Authority, in particular in the Member State of your residence, place of work or place of an alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

If you wish to exercise any of these rights, please contact us (see Contact Us below). We will respond to your request within one month. That period may be extended by two further months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt of your request. We may request proof of identification to verify your request. We have the right to refuse your request where there is a basis to do so in law, or if your request is manifestly unfounded or excessive, or to the extent necessary for important objectives of public interest.

In limited circumstances (such as our use of social media), we may act as a joint controller with another party.  In such circumstances, upon your request to exercise any of the above rights we will advise you if there is another controller who you should contact.  Please note that any other joint controller will also have its own privacy policy and cookie policy.

SECURITY AND WHERE WE STORE YOUR PERSONAL DATA

We are committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorised access and use. As effective as modern security practices are, no physical or electronic security system is entirely secure. We cannot guarantee the complete security of our database, nor can we guarantee that information you supply will not be intercepted while being transmitted to us over the Internet. We have implemented strict internal guidelines to ensure that your privacy is safeguarded at every level of our organisation. We will continue to revise policies and implement additional security features as new technologies become available. Where we have given you a password which enables you to access certain parts of our website, you are responsible for keeping that password confidential. We ask you not to share your password with anyone.

Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our website. Any transmission of personal data is at your own risk. Once we receive your personal data, we use appropriate security measures to seek to prevent unauthorised access or disclosure.

Managing and Disabling Cookies and withdrawing your Consent 

There are two ways to manage your cookie preferences and you may need to refresh your page for the settings to take effect:

CONSENT MANAGEMENT TOOL (CMT) 

With the exception of our social media sites, we use a CMT on our websites to assist us in managing your choices in relation to cookies and to help us to meet our obligations under ePrivacy and data protection law. This is a form of software provided by a third party (OneTrust).  When you visit our website you are presented with banners, pop-ups and sliders to manage your cookie consents.  The CMT can be used at any time to customise your cookie preferences in respect of our website. The CMT will record when you have consented to cookies and will ask for consent again every 6 months. It specifically controls the targeting cookies, functional cookies and performance cookies set by using our website.  Strictly necessary cookies cannot be disabled, nor can the CMT be used to block 3rd party cookies on third-party websites linked from our website.  These 3rd party cookies can be blocked using the method outlined below (Browser Settings).

You can update your cookie preferences by clicking on the Cookie Settings link at the bottom of the website.

BROWSER SETTINGS

Most web browsers give you some control over cookies through the browser settings.  However, turning cookies off may interfere with your browsing experience. 

For instructions on how to manage and disable cookies, visit the browser developer's website. If you use more Devices and/or browsers you will need to disable cookies on each Device and on each browser separately. Find out how to manage and disable cookies on popular browsers:

GOOGLE ANALYTICS 

Some of our websites use Google Analytics.  Google Analytics is a web analytics service provided by Google, Inc.  If you don’t want Google Analytics to be used in your browser, you can install the Google Analytics browser add-on. Learn more about Google Analytics and privacy from Google here and here.

CHANGES TO THIS POLICY

We may change this Cookie Policy from time to time.  If we make any changes, we will post those changes in this document and update the "Last Updated" date at the bottom of this Cookie Policy.  However, if we make material changes to this Cookie Policy we will notify you by means of a prominent notice on our website prior to the change becoming effective. 

CONTACT US

Questions, comments, requests and complaints regarding this Cookie Policy are welcome and should be addressed to PrivacyOfficer@algoodbody.com or by writing to A&L Goodbody,  IFSC, North Wall Quay, Dublin 1. All requests will be dealt with promptly and efficiently. You also have the right to make a complaint at any time to the Data Protection Commission, the Irish supervisory authority for data protection issues.

Last Updated: January 2021