Data Protection / GDPR in Dunnes Stores

  1. Your Data, Your Rights
  2. What is Personal Data?
  3. What You’re Entitled To
  4. Common Concerns
  5. What to Do if You Have Concerns
  6. Mandate is Here to Help

Your Data, Your Rights

As a Dunnes worker, your personal information is protected under the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988–2018. These laws ensure that your data is handled lawfully, transparently, and securely by your employer.

Dunnes, like all employers, is legally required to protect any personal data it holds about you.

What is Personal Data?

This includes (but is not limited to):

  • Your name, address, phone number and PPS number
  • Employment records and payslips
  • CCTV footage where you appear
  • Disciplinary or absence records
  • Emails that reference you directly
  • Confidential information personal to you e.g. Medical Records

What You’re Entitled To

Under GDPR, you have the right to:

  • Access your data: You can request a copy of all personal data held about you (known as a Subject Access Request)

  • Correct your data: You can request inaccurate or outdated information be corrected

  • Know how your data is used: Dunnes must inform you what data is collected, why, and how long it will be retained

  • Data minimisation: Dunnes may only collect the minimum data needed for employment purposes

  • Privacy: Your data must be protected against unauthorised access, sharing, or misuse

  • CCTV rights: You must be informed if you are being recorded and why — CCTV cannot be used for purposes beyond what is stated

  • Remove your data: If requested by you, Dunnes must remove any of your personal data as far as practicable

Common Concerns

  • Access to employee files without consent
  • Use of CCTV footage without proper notice or for unauthorised reasons
  • Excessive or irrelevant data being collected
  • Failure to respond to data access or correction requests
  • Surveillance or tracking without a legitimate reason
  • Sharing your information without your knowledge

What to Do if You Have Concerns

If you believe:

  • Your data is being misused
  • You were not informed about surveillance
  • You’ve been denied access to your own records
  • There has been a data breach

You should raise the issue with your Shop Steward or local Mandate office immediately. You may also have the right to lodge a complaint with the Data Protection Commission (www.dataprotection.ie).

Mandate is Here to Help

Mandate is committed to ensuring all Dunnes members:

  • Know their rights under GDPR
  • Have access to their own personal records
  • Are protected from unfair surveillance or data misuse

Need support on a data protection issue?
Talk to your Shop Steward, contact your local Mandate office, or visit our Contact Page.