Statement
Privacy Policy
Hummingbird respects your privacy. This policy explains what personal data we collect through this website, why we use it, who may process it on our behalf and the choices available to you.
Last updated:
Who is responsible for your data?
The data controller is Celtia Tourism Marketing Limited t/a Hummingbird, Portershed, 15 Market Street, Galway, Ireland. You can contact us about privacy at info@thehummingbird.eco.
Information you give us
Project and contact enquiries
When you use the project form or contact us directly, we may receive your name, email address, organisation and role, current website address, project type, timing, approximate investment range, and the content of your message. We use this to understand and respond to the enquiry, decide whether we can help and keep an appropriate record of the conversation.
We use this information to respond to your enquiry. The legal basis is taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
Client and supplier information
If we work together, we may process contact, contractual, project, invoicing and payment information needed to provide or receive services, meet legal obligations and manage the relationship.
Information collected when you use the website
Essential technical information. The server and security systems may process limited information such as IP address, browser information, requested page and technical events – needed to deliver the site, maintain security and diagnose failures. Server logs are kept for a short period by our hosting provider and are not used to identify visitors.
Analytics. With your consent, we use Google Analytics to understand how the website is used and to improve it. The service processes usage and device information, uses cookies, and retains information for a defined period. Analytics cookies are not set before you consent, and you can accept, reject or change your choice at any time through the cookie settings. IP addresses are anonymised and analytics data is kept for two months.
Embedded content. Some pages contain services supplied by other organisations (for example, click-to-play video). These load only after you choose to activate them and may then receive technical information or set cookies.
Cookies and similar technologies
We use strictly necessary technologies where required to provide a service you request, maintain security or remember an essential choice. Non-essential technologies are used only after the required consent.
The table below lists every cookie or similar technology used. Analytics cookies are set only after consent:
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| wordpress_*, wordpress_logged_in_*, wp-settings-* | Hummingbird (first-party) | Authentication and preferences for site editors only – never set for visitors | Session to 1 year | Strictly necessary |
| _ga, _ga_* | Google Analytics (third-party) | Distinguishes visitors and sessions for usage statistics – set only after consent | Up to 2 years | Analytics (consent) |
| YouTube player storage (youtube-nocookie.com) | Google (third-party) | Video playback on the story page – loads only after you press play | Set by Google; see Google’s privacy policy | On activation only |
No advertising cookies are used. The newsletter and enquiry forms set no cookies – they submit directly to our server.
Who receives your information?
Our website is hosted by Raidboxes GmbH in Germany (EU). We may also use trusted service providers for email, forms, security, backups and business systems. They process information only for defined purposes under appropriate arrangements. We do not sell personal data.
International transfers
Some providers may process information outside the European Economic Area. Where that happens, we use a lawful transfer mechanism and appropriate safeguards. For Google Analytics, this is the EU-US Data Privacy Framework.
How long we keep information
We keep personal data only for as long as needed for the purpose for which it was collected, including legal, accounting and dispute requirements. Enquiries that do not lead to a project are deleted within 24 months.
How we protect information
We use technical and organisational measures appropriate to the nature and risk of the information: access controls, encrypted connections, backups, updates and limited access. No internet service can promise absolute security.
Your data-protection rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or receive your data, to object to processing, to withdraw consent, and to complain to a supervisory authority. In Ireland, that is the Data Protection Commission. To exercise a right, contact info@thehummingbird.eco.
Children
This website and Hummingbird’s services are directed towards organisations and adults, not children.
Changes and contact
We may update this policy when the website, services or legal requirements change; the date above shows the last revision. Questions can be sent to info@thehummingbird.eco.