GDPR Compliance
Your data protection rights under GDPR
Learn about your rights and how we protect your personal data
Quick Actions
Exercise your GDPR rights quickly and easily
What is GDPR?
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all organizations that process personal data of individuals in the European Union, regardless of where the organization is located.
GDPR gives you greater control over your personal data and ensures organizations are transparent about how they collect, use, and protect your information.
Your Rights Under GDPR
Right to be Informed
You have the right to know how your personal data is being processed.
- What data we collect and why
- How we use your data
- Who we share your data with
- How long we keep your data
Right of Access
You can request a copy of the personal data we hold about you.
- Free of charge (in most cases)
- Provided within 30 days
- In a commonly used electronic format
- Includes all data categories we process
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
- Update incorrect information
- Complete incomplete data
- Changes made without delay
- We'll inform relevant third parties
Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal data in certain circumstances.
- When data is no longer necessary
- When you withdraw consent
- When data has been unlawfully processed
- Subject to legal retention requirements
Right to Restrict Processing
Limit how we use your data while maintaining storage rights.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent
Withdraw consent for processing at any time.
How We Protect Your Data
We implement comprehensive technical and organizational measures to protect your personal data:
Technical Measures
- End-to-end encryption for data transmission
- Encrypted storage of sensitive data
- Multi-factor authentication systems
- Regular security audits and penetration testing
- Automated backup and disaster recovery
- Network security and firewall protection
Organizational Measures
- Staff training on data protection
- Access controls and need-to-know principles
- Data processing agreements with vendors
- Regular policy reviews and updates
- Incident response procedures
- Data Protection Impact Assessments
Legal Basis for Processing Your Data
We only process your personal data when we have a legal basis to do so:
Consent
You have explicitly agreed to the processing (e.g., marketing communications, cookies)
Contract
Processing is necessary to perform our services (e.g., job placement, payroll)
Legal Obligation
We must process data to comply with legal requirements (e.g., tax records, employment law)
Legitimate Interest
Processing is necessary for our business operations (e.g., fraud prevention, security)
Data Breach Procedures
In the unlikely event of a data breach, we have procedures in place to:
- Immediate Response: Contain the breach and assess the risk
- Authority Notification: Report to the Data Protection Commission within 72 hours
- Individual Notification: Inform affected individuals if there's a high risk to their rights
- Investigation: Conduct a thorough investigation to prevent future breaches
- Remediation: Take steps to mitigate any harm and improve security measures
How to Exercise Your Rights
Making a Request
To exercise any of your GDPR rights, please contact us with:
- Your full name and contact details
- Description of your request and which right you're exercising
- Proof of identity (for security purposes)
- Specific details about the data concerned (if applicable)
Response Times
Standard Requests: 30 days
Complex Requests: Up to 90 days
Urgent Requests: 3-5 business days
Data Breaches: Immediate
Verification Process
To protect your privacy, we may request additional verification:
- Government-issued ID (passport, driving license)
- Proof of address (utility bill, bank statement)
- Additional security questions about your account
Supervisory Authority
If you're not satisfied with how we handle your data protection concerns, you have the right to lodge a complaint with the Irish Data Protection Commission:
Data Protection Commission
Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Phone: +353 (0)761 104 800
Email: [email protected]
Website: www.dataprotection.ie
Contact Our Data Protection Officer
For all GDPR-related inquiries and requests
Data Protection Officer
Office Address
The Elms Rathbridge Demesne
Whitesland Kildare
Co. Kildare R51PT16
Ireland
Emergency Contact: For urgent data protection matters, call our 24/7 line at +353 89 241 9525