This document refers to personal data, which is defined as information concerning any living person (a natural person who hereafter will be called the Data Subject) that is not already in the public domain.
The General Data Protection Regulation (GDPR) seeks to protect and enhance the rights of data subjects.
These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data and the unrestricted movement of personal data within the EU. It should be noted that GDPR does not apply to information already in the public domain.
Catapult Ltd is pleased to provide the following Privacy Notice:

We are Catapult Group International Ltd. (“Catapult”) with an address at 44 Westland Row, Dublin 2, Ireland D02 W274. We specialise in experience design, production, and creative technology.

At Catapult, we understand the importance of safeguarding your privacy and protecting your personal information. This Privacy Notice outlines how we collect, use, disclose, and protect your personal data when you interact with our website and services. To the extent that the General Data Protection Regulation (“GDPR”) or the UK Data Protection Act 2018 (“DPA”) applies to the processing activities outlined below, Catapult is the data controller.

Please read the following carefully to understand our practices regarding your personal data and how we treat it.

This Privacy Notice applies to personal data that we process about you when you:

• Use our website;

• Contact us;

• Apply for one of our job vacancies;

“consent”
means the consent of the data subject which must be a freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify their agreement to the processing of personal data relating to them;

“data controller”
means the natural or legal person or organisation which, alone or jointly with others, determines the purposes and means of the processing of personal data. For the purposes of this Policy, the Company is the data controller of all personal data relating to Employees, Contractors, Visitors, Customers and Vendor Employees used in our business for our commercial purposes;

“data processor”
means a natural or legal person or organisation which processes personal data on behalf of a data controller;

“data subject”
means a living, identified, or identifiable natural person about whom the Company holds personal data;

“EEA”
means the European Economic Area, consisting of all EU Member States, Iceland, Liechtenstein, and Norway;

“personal data”
means any information relating to a data subject who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that data subject;

“personal data breach”
means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored, or otherwise processed;

“processing”
means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction;

Personal Data Collected Directly From You (where provided)

• Identification Details: including your first and last name, title, gender, job function, company name.

• Contact Details: including your personal or business phone number, email address, home address, emergency contact information.

• Communication Details: including Identification Details and Contact Details and any information which you provide in the form of queries, comments, feedback, on social media messaging or otherwise.

• Application Details: including Identification Details, Contact Details, CV details, cover letter, information within your CV, and preferred locations of work, when you apply for a vacant role.

• Marketing Preferences: including preferred methods of contact and your Contact Details.

• Other: dietary restrictions.

Personal Data Collected Automatically

• Cookies Details and Preferences: when visiting our Website, we collect data automatically through your browser or device, by making use of cookies and other technologies to track visitors on the Website and to collect information about your use of our Website. Such information includes an identifier that corresponds to your device, your IP address, information about the device you use (e.g., operating system, model, language setting), duration, frequency, time of use, click through information (meaning the way you browse through and use our Website) and/or region.

Catapult collects and uses your Personal Data for the purposes and lawful bases as set out below.

For our Legitimate Interests.

We process your Personal Data for the following purposes on the basis of our legitimate interests:

• Communication Purposes. We may process Identification Details, Contact Details and Communications Details to (a) respond to any questions, enquiries, emails, or comments you might share with us via the contact forms available on the Website; (b) respond to any phone calls you make to us; and (c) send any required service update emails, for example, changes or updates to our services, or terms.

• Event Attendance. We collect your dietary restrictions to customize food we provide to you at our events.

With Your Consent.

We process your Personal Data for the following purposes on the basis of your consent:

• Marketing Purposes. Where you have consented (or “opted-in”) to receiving marketing communications such as newsletters or other marketing materials from us, we will process Identification Details, Contact Details, and Marketing Preferences to send direct marketing communications to you. We may use your name to personalize digital and print communications sent to you by Catapult, on name badges at Catapult programs that you attend, and to appear in the database.

• Cookies and Analytics Purposes. Where you have consented to the use of cookies on the Website, Catapult uses cookie preference details and cookies and analytics details to (a) collect additional website usage data to improve our services.

• Photograph or Video Purposes. Where you have consented to your photograph or video being taken at an event, we will process your Identification Details, audio / visual recording details and in some cases, where provided, Contact Details for the purpose of (a) taking the photograph or video footage; and (b) with your consent, the publishing of photographs or video footage on specified platforms or locations, for example, within a newsletter, on our Website or on our social media channels.

Legal Obligations.

We may process your Personal Data for the following purposes on the basis of our legal obligations:

• Compliance Purposes. We may process or disclose Identification Details, Contact Details, Communications Details, recording details and/or other details in order to ensure compliance with company policy and applicable legal obligations. For example, a court order, or a request from a regulator or authority.

• For the Purposes of Defending Against Legal Claims, Demands or Proceedings. We may process Identification Details, Contact Details, Communications Details, and/or other details in order to defend against legal matters.

• For the Purposes of Establishing, Protecting or Exercising Legal Rights. We may process Identification Details, Contact Details, Communications Details and/or other details in order to establish, protection or exercise our legal rights for example, to enforce our agreements or other contracts.

We do not currently share your personal data to third parties.

However, in limited circumstances we may have to disclose your personal data to third parties:

In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;

If we or substantially all of our assets are acquired by a third party, in which case information held by us about our customers will be one of the transferred assets;

If we are under a duty to disclose or share your information in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect our rights, property, or safety, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Our website utilises cookies, which are small information files generated by a web server, sent to a web browser, and subsequently provided by the visitor’s browser to the website each time they return.

These cookies are employed by Wordpress.org to aid in identifying and tracking visitors, as well as to understand website access preferences. For visitors to the Catapult website who prefer not to have cookies placed on their devices, we recommend adjusting their browser settings to refuse cookies prior to accessing our website.

We retain your Personal Data for as long as required to satisfy the purpose for which they were collected and used (for example, for the time necessary for us to provide you with customer service, answer queries or resolve technical problems), unless a longer period is necessary to comply with legal or contractual obligations, or to defend a legal claim.

Data is held in Ireland using different (multiple) servers. We do not store personal data outside the EEA.

Catapult does not carry out Automated Decision Making or Profiling activities.

You have the following rights:

• The right to access the personal data we hold about you.

• The right to require us to rectify any inaccurate personal data about you without undue delay.

• The right to have us erase any personal data we hold about you in circumstances such as where it is no longer necessary for us to hold the personal data or, in some circumstances, if you have withdrawn your consent to the processing.

• The right to object to us processing personal data about you such as processing for profiling or direct marketing.

• The right to ask us to provide your personal data to you in a portable format or, where technically feasible, for us to port that personal data to another provider provided it does not result in a disclosure of personal data relating to other people.

• The right to request a restriction of the processing of your personal data.

You may exercise any of the above rights by contacting us at security@thisiscatapult.com.

You may lodge a complaint with your local supervisory authority with respect to our processing of your personal data.

US Residents

In addition to the rights explained elsewhere in this notice, the following may apply with respect to U.S. residents: Depending on where you live, you may have certain rights with respect to your information.

Some Internet browsers include the ability to transmit “Do Not Track” signals. Since uniform standards for “Do Not Track” signals have not yet been adopted, Catapult does not process or respond to “Do Not Track” signals.

California, Colorado, Connecticut, Utah and Virginia residents may be able to request:

• access to and/or a copy of certain personal information we hold about you;

• correction of inaccurate information that we have about you;

• deletion of certain personal information we have collected from you; and/or

• provide information about financial incentives that we offer to you, if any.

California, Colorado, Connecticut, Utah and Virginia residents also have opt out rights described below.

California residents can also request information about the categories of personal information we collect, disclose or sell or share about you; the categories of sources of such information; the business or commercial purpose for collecting or selling or sharing your personal information; and the categories of third parties to whom we disclose personal information. Such information is also set forth in this Privacy Policy. Residents of certain other countries may be able request one or more of the above under applicable law.

Please note: Your rights and our responses will vary based on your state or country of residency. You may be located in a jurisdiction where we are not obligated, or are unable, to fulfill a request. In such a case, your request may not be fulfilled.

If you would like information regarding your rights or would like to make a request (or if you are an authorized agent acting in accordance with applicable law), please click here or email us at security@thisiscatapult.com.

• We will take reasonable steps to verify your identity and requests, including by verifying your account information, residency or the email address you provide. If you are an authorized agent submitting a request on behalf of another individual, we may require proof of your written authorization before processing the request.

• Certain information may be exempt from such requests under applicable law such as information we retain for legal compliance and to secure our systems. We may need certain information in order to assist you.

• Applicable law may further provide you with the right to not be discriminated against for exercising your rights.

• If you have enabled a legally recognized browser-based opt out preference signal (such as Global Privacy Control) on your browser, we recognize such preference in accordance and to the extent required by applicable law.

• Virginia, Colorado, and Connecticut residents may appeal the denial of a request here: please click here or email us at security@thisiscatapult.com.

We Do Not Sell Personal Information or Share or Process Personal Information for Targeted Advertising (California, Colorado, Connecticut, Utah and Virginia Residents Only).

If you have any questions about this Privacy Notice or the processing of your Personal Data in general, please email security@thisiscatapult.com or contact us our office at:

44 Westland Row,
Dublin 2,
Ireland
D02 W274

We will update our Privacy Notice as needed and the most recent version will be available on each applicable website at all times. If a fundamental change to the nature of the use of your Personal Data is involved or if the change is in any other manner relevant to you, we will ensure that information is provided to you separately.

This Privacy Notice was last updated in June 2024.