pispepmesog

Our Commitment to Data Protection

pispepmesog is committed to ensuring the protection of all personal data that we process in accordance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

Data Controller

pispepmesog acts as the data controller for personal data collected through this website. Our contact details are:

pispepmesog
12 Fitzwilliam Square
Dublin 2, D02 XY45
Ireland
Email: [email protected]

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access (Article 15)

You have the right to obtain confirmation of whether we process your personal data and to access that data along with information about how it is processed.

Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete data completed.

Right to Erasure (Article 17)

Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.

Right to Restriction of Processing (Article 18)

You may request that we limit how we use your data in certain circumstances, such as when you contest its accuracy.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object (Article 21)

You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request. This period may be extended by two months where necessary, taking into account the complexity and number of requests.

We may need to verify your identity before processing your request. This is to ensure that personal data is not disclosed to any person who has no right to receive it.

Legal Basis for Processing

We process personal data only when we have a valid legal basis. Our legal bases for processing include:

Consent: Where you have given explicit consent for specific processing activities
Contract: Where processing is necessary for the performance of a contract with you
Legal obligation: Where we must process data to comply with the law
Legitimate interests: Where processing is necessary for our legitimate business interests, balanced against your rights

Data Transfers

We primarily process data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

Encryption of personal data where appropriate
Regular testing and evaluation of security measures
Staff training on data protection
Access controls and authentication procedures

Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Commission within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Supervisory Authority

If you believe that our processing of your personal data infringes GDPR, you have the right to lodge a complaint with the Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Website: www.dataprotection.ie

Contact Us

For any questions regarding GDPR compliance or data protection, please contact us: