WHAT IS GDPR?
The GDPR was adopted by the EU Parliament to:
Create consistency within all the member states of the EU as to the rules regarding data protection, implementation of the law, and how the rules are enforced.
Modernise the principles laid out in the 1995 Data Protection Directive (Directive 95/46/EC), which was written before the advent of social media, 'smart' mobile devices that now can access things like cameras and geo-location information, and the ubiquity of online services and communications.
Reinforce the rights of individuals to control and protect their personal data.
Strengthen the EU internal market, ensuring stronger enforcement of the rules, streamlining international transfers of personal data and setting global data protection standards.
GDPR defines personal data broadly as: any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Carrig Conservation do not collect personal data - we require contact names and details in order to provide services as requested by you. We will not ask for specific identifiers, other then for the means of collecting payment for our services, and in this instance require an invoice contact to include, but not limited to: Full Name; Company Name; Company address; Contact telephone number and email.
A Data Controller is an organisation that determines the purposes, conditions, and means of the processing of personal data. The Data Controller at Carrig is ... who can be contacted at email@example.com. A Data Processor is an organisation that processes personal data on behalf of Controllers. Third party data processors with which Carrig Conservation is associated includes (but is not limited to) - Please be assured, we only work with third party data processors who are fully compliant with GDPR, and at all times your personal details will remain secure:
Website/Google analytics using contact forms via our website - read about that here.
This website uses marketing and tracking technologies. Opting out of this will opt you out of all cookies, except for those needed to run the website. Note that some products may not work as well without tracking cookies.
Carrig Conservation uses your data for the following legitimate purposes:
To enable our business to respond to your enquiries and to provide information on your proposal or job.
Enquiries include, but are not limited to, those made in person, by email, text message or telephone, via our website at www.carrig.ie and associated social media platform of Facebook and Twitter.
To enable the completion of your proposal or job according to your instructions.
To inform you of timescales and/or delays where applicable.
We will keep your personal data on our secure systems indefinitely as a requirement of insurance cover (unless you request removal according to your rights under the GDPR).
SECURITY OF DATA
We operate a 'safe file' system for all client information. This applies to all client files and contacts whether securely stored in physical files or held via desktop/handheld devices. Non-essential paperwork is routinely shredded and recycled and physical records are scanned and shredded afterwards.
PAYMENT / FINANCIAL SECURITY
Information coming soon.
YOUR RIGHTS UNDER THE GDPR
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
The right to request a copy of your personal data which Carrig Conservation holds.
The right to request that Carrig Conservation corrects any personal data if it is found to be inaccurate or out of date.
The right to request your personal data is erased where it is no longer necessary for Carrig Conservation to retain such data.
The right to withdraw your consent to the processing of personal data at any time.
The right to request that Carrig Conservation provides you with your personal data and where possible, transmits that data directly to another data controller, (known as the right to data portability).
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing.
The right to object to the processing of personal data.
The right to lodge a complaint with the Information Commissioners Office.