Privacy-Data-Policy

PRIVACY & DATA POLICY

At Carrig, we understand the importance of data privacy and value our client's privacy and always aim to demonstrate transparency and fairness in the collection and use of client's/ personal data. To that end, we have updated our terms in compliance with the GDPR, effective 25th May 2018.
Our Privacy Policy will be maintained on our website, and from time to time we may update this version - in order to stay informed, we advise you to review this page regularly to ensure that you are happy with any changes.

WHAT IS GDPR?

The GDPR was adopted by the EU Parliament to:

Create consistency within all the member states of the EU as to the rules regarding data protection, implementation of the law, and how the rules are enforced.
Modernise the principles laid out in the 1995 Data Protection Directive (Directive 95/46/EC), which was written before the advent of social media, 'smart' mobile devices that now can access things like cameras and geo-location information, and the ubiquity of online services and communications.
Reinforce the rights of individuals to control and protect their personal data.
Strengthen the EU internal market, ensuring stronger enforcement of the rules, streamlining international transfers of personal data and setting global data protection standards.

WHAT IS PERSONAL DATA?

GDPR defines personal data broadly as: any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Carrig Conservation do not collect personal data - we require contact names and details in order to provide services as requested by you. We will not ask for specific identifiers, other then for the means of collecting payment for our services, and in this instance require an invoice contact to include, but not limited to: Full Name; Company Name; Company address; Contact telephone number and email.

DATA CONTROLLER

A Data Controller is an organisation that determines the purposes, conditions, and means of the processing of personal data. The Data Controller at Carrig is ... who can be contacted at info@carrig.ie. A Data Processor is an organisation that processes personal data on behalf of Controllers. Third party data processors with which Carrig Conservation is associated includes (but is not limited to) - Please be assured, we only work with third party data processors who are fully compliant with GDPR, and at all times your personal details will remain secure:

Weebly (this website) - read about their privacy policy here.
Social media platforms Facebook and Twitter.
Website/Google analytics using contact forms via our website - read about that here.

COOKIES

The website and the e-commerce site for Carrig is created on Third party platform, Weebly. Weebly sites do use Cookies for site functionality, site administration and security and for marketing and analytics purposes. You can read more about Weebly's privacy policy here, and more about cookies here. See the Cookies opt-out below.

HOW DO WE USE PERSONAL DATA?

Carrig Conservation uses your data for the following legitimate purposes:

To enable our business to respond to your enquiries and to provide information on your proposal or job.
Enquiries include, but are not limited to, those made in person, by email, text message or telephone, via our website at www.carrig.ie and associated social media platform of Facebook and Twitter.
To enable the completion of your proposal or job according to your instructions.
To inform you of timescales and/or delays where applicable.
We will keep your personal data on our secure systems indefinitely as a requirement of insurance cover (unless you request removal according to your rights under the GDPR).

SECURITY OF DATA

We operate a 'safe file' system for all client information. This applies to all client files and contacts whether securely stored in physical files or held via desktop/handheld devices. Non-essential paperwork is routinely shredded and recycled and physical records are scanned and shredded afterwards.

PAYMENT / FINANCIAL SECURITY

Information coming soon.

YOUR RIGHTS UNDER THE GDPR

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
The right to request a copy of your personal data which Carrig Conservation holds.
The right to request that Carrig Conservation corrects any personal data if it is found to be inaccurate or out of date.
The right to request your personal data is erased where it is no longer necessary for Carrig Conservation to retain such data.
The right to withdraw your consent to the processing of personal data at any time.
The right to request that Carrig Conservation provides you with your personal data and where possible, transmits that data directly to another data controller, (known as the right to data portability).
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing.
The right to object to the processing of personal data.
The right to lodge a complaint with the Information Commissioners Office.