Our commitment to protecting your personal data under European law
ochreharbor is committed to full compliance with the General Data Protection Regulation (GDPR) as applicable in the European Union and European Economic Area. This page outlines how we fulfill our obligations under GDPR.
ochreharbor acts as the data controller for personal information collected through this website. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently.
Contact details:
ochreharbor
27 Merrion Square East
Dublin 2, D02 XF86
Ireland
Email: [email protected]
We process personal data under the following lawful bases as defined by GDPR:
You have the following rights regarding your personal data:
You may request confirmation of whether we process your personal data and obtain a copy of such data.
You may request correction of inaccurate personal data and completion of incomplete data.
You may request deletion of your personal data under certain circumstances, including when data is no longer necessary for its original purpose or when you withdraw consent.
You may request limitation of processing under specific conditions, such as when contesting data accuracy.
You may request transfer of your personal data in a structured, commonly used format to another controller.
You may object to processing based on legitimate interests or for direct marketing purposes.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
We implement appropriate technical and organizational measures to ensure data security, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.
Personal data collected through this website is processed within the European Economic Area. Any transfers outside the EEA would be conducted with appropriate safeguards in accordance with GDPR requirements.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Contact information submitted through forms is retained for up to 24 months unless deletion is requested earlier.
To exercise any of your rights under GDPR, contact us at [email protected]. We will respond to your request within one month, though this may be extended by two additional months for complex requests.
You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, workplace, or place of alleged infringement. In Ireland, the relevant authority is:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children without parental consent.
We may update this GDPR compliance information to reflect changes in our practices or legal requirements. Material changes will be communicated through appropriate channels.