Who controls your data

Dornan Engineering Services Limited, trading as Dornan and a Turner company, is the controller for personal data processed through S.C.O.P.E. Dornan's Data Protection Officer can be contacted through the S.C.O.P.E support channel or at dataprotection@dornan.ie.

A subcontractor remains an independent controller for the routine worker data it collects and provides to Dornan. The Subcontractor Data Sharing Agreement describes that separate responsibility.

What we collect and why

We collect account identity and contact details to authenticate users, manage access, communicate about the portal, and keep an evidence trail of legal and compliance actions.

We collect company, project, worker identity, contact, role, training, health and safety, certification, and document information to assess project readiness, protect people on site, meet contractual duties, and administer the S.C.O.P.E workspace.

Lawful bases

Depending on the processing, Dornan relies on performance of a contract or steps requested before a contract, compliance with legal obligations, legitimate interests in safe and compliant project delivery, and consent only where a separate optional choice specifically asks for it.

Acknowledging this statement is evidence that you received and read the information. It is not blanket GDPR consent and does not replace any lawful basis described above.

Special-category information

Some worker records may reveal health or safety information. Dornan uses it only when necessary for occupational safety, site access, training, or a legal duty, applies an additional Article 9 condition, restricts access by role and project, and does not ask portal users to upload health details to a legal email.

Recipients and providers

Information is shared with authorised Dornan teams, the relevant subcontractor controller, project owners where necessary, professional advisers under confidentiality, and service providers that host, secure, authenticate, deliver email, or provide document and infrastructure services.

Providers process information under written instructions and contractual safeguards. Access is limited to the service needed. S.C.O.P.E may use providers in the European Economic Area and providers in other countries with an adequacy decision, standard contractual clauses, or another lawful transfer mechanism.

Retention

Dornan keeps account, access, legal-action, project, worker, and compliance records for the life of the relationship and the period needed for contractual, safety, audit, limitation, and legal requirements. Routine portal email delivery records are kept only long enough to prove delivery, retry or resolve a failure, and meet audit requirements.

When a retention period ends, information is securely deleted or irreversibly anonymised unless a legal hold or another documented obligation requires longer retention.

Your rights and human review

Subject to legal limits, you may ask for access, correction, erasure, restriction, portability, or objection, and you may withdraw optional consent. Contact the DPO first; you can also complain to the Data Protection Commission in Ireland.

S.C.O.P.E can flag missing evidence or restrict a route, but a person remains responsible for material access and compliance decisions. Ask Dornan for human review if an automated check has materially affected you.

Changes and contact

Dornan publishes each version with an effective date and content hash. A material change may require renewed acknowledgement. Questions about this statement, a rights request, or a transfer safeguard should be sent to the DPO through dataprotection@dornan.ie or S.C.O.P.E support.

Sign in to S.C.O.P.E

Preparing your sign-in

Sign in to S.C.O.P.E