Your GDPR Rights
Under the General Data Protection Regulation (GDPR), you have specific rights regarding how we collect, use, store, and share your personal data. This page outlines those rights and explains how you can exercise them. We are committed to transparency, fairness, and giving you full control over your information.
Right to Access
You have the right to request a copy of the personal data we hold about you, including details on how it is being processed, who it is shared with, and how long it will be retained.
Right to Rectification
If any of your personal data is inaccurate or incomplete, you have the right to have it corrected or updated. We will verify and process valid rectification requests promptly.
Right to Erasure ("Right to be Forgotten")
Under certain circumstances, you can request the deletion of your personal data. This applies when the data is no longer necessary for its original purpose, you withdraw consent, or the processing is unlawful.
Right to Restrict Processing
You may request that we temporarily halt the processing of your data. This typically applies while we verify accuracy, contest lawful processing, or determine whether your interests override our legitimate reasons for processing.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to Object
You have the right to object to processing based on legitimate interests or public task. If your objection is justified, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Rights Regarding Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects. We do not currently use fully automated decision-making for such purposes.
How to Exercise Your Rights
- Submit a written request via email or our secure contact form.
- Clearly state which right(s) you wish to exercise and describe your request.
- Provide verification details to confirm your identity and protect your data.
- We will acknowledge receipt and respond within 30 days, extendable by two months if necessary for complex requests.
- No fee will be charged for standard requests. We may request reasonable fees for manifestly unfounded or excessive repeated requests.
Contact Our Data Protection Team
If you believe your rights have been violated or are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority or the Irish Data Protection Commission (as our lead EU authority). You may also contact us directly before escalating.