Privacy Policy for Dublin University Photography Association


The event organiser, Dublin University Photography Association, has the legal responsibility to tell ticket buyers and event attendees how their personal information will be collected and used. You can find their Privacy Policy below or contact them to request it.


Privacy Policy — Dublin University Photography Association (DUPA)

Dublin University Photography Association (“DUPA”, “we”, “our”) collects and processes personal data in order to deliver our headshot services and manage bookings. We are the data controller of your personal data. If you have any questions, you can contact us at dupa@csc.tcd.ie. Our postal address is Regent House 6, Trinity College Dublin, College Green, Dublin 2, D02 FD37, Ireland.

When you book or attend a DUPA headshot session, we collect information that you provide to us such as your name, contact details, and any booking or payment information required to manage your attendance. We also take and process photographic images of you as part of the service. This information enables us to confirm bookings, communicate with participants, and deliver final images efficiently.

We may use the photographs taken of you to promote DUPA’s events, activities, and membership where you have consented to such use. Promotional use will always be non-commercial in nature and may include, for example, our social media posts or posters advertising future headshot sessions. You may withdraw your consent for promotional use at any time by contacting us at the email address above. Withdrawal of consent will apply to future use only and will not require removal of already-published materials.

To provide the booking and image delivery service, your personal data may be shared only with trusted third-party providers who support our operations, such as booking platforms, payment processors, or IT service providers. We will never sell your personal data or otherwise share it for purposes unrelated to DUPA’s activities, except where required by law.

We take reasonable and appropriate measures to ensure that your information is stored securely, with access limited to authorised DUPA committee members who require it to perform their role. Booking-related personal data is normally retained for up to twelve months after the event, and images are retained for up to three years for administrative and promotional purposes unless you request deletion earlier.

Under applicable data protection law, including the GDPR, you have the right to request access to the personal data we hold about you, to correct inaccuracies, to request deletion, and to object or withdraw consent to processing where relevant. Any such requests should be directed to dupa@csc.tcd.ie.

We may update this Privacy Policy from time to time to reflect changes in our processes or legal requirements. The version available at the point of booking will apply.