GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

Glenquill is committed to ensuring compliance with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals within the European Union and European Economic Area.

Data Controller Information

Glenquill acts as the data controller for personal information collected through this website and in connection with our consultancy services.

Contact details:
Glenquill
14 Fitzwilliam Square East
Dublin 2, D02 W773
Ireland
Email: [email protected]

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data along with information about how it is processed.

Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete data we hold about you.

Right to Erasure

In certain circumstances, you may request deletion of your personal data. This right is not absolute and depends on specific legal grounds.

Right to Restrict Processing

You may request that we limit how we use your data in certain circumstances, such as while we verify accuracy or assess a deletion request.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Lawful Basis for Processing

We process personal data based on the following lawful bases:

• Consent: Where you have given clear consent for specific purposes
• Contract: Where processing is necessary for performing our services
• Legal Obligation: Where we must comply with applicable laws
• Legitimate Interests: Where processing serves our business interests without overriding your fundamental rights

Data Protection Principles

We adhere to the core principles of GDPR:

• Lawfulness, fairness, and transparency in all data processing
• Purpose limitation to specified, explicit, and legitimate purposes
• Data minimisation to what is necessary for stated purposes
• Accuracy and keeping data up to date
• Storage limitation to necessary time periods
• Integrity and confidentiality through appropriate security measures
• Accountability for demonstrating compliance

International Data Transfers

When transferring data outside the EEA, we ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequacy decisions
• Other appropriate safeguards as permitted under GDPR

Data Breach Procedures

We maintain procedures to detect, report, and investigate personal data breaches. Where a breach is likely to result in high risk to individuals, we will notify affected data subjects without undue delay.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the details provided above. We will respond to requests within one month, which may be extended by two further months for complex requests.

We may request verification of your identity before fulfilling certain requests. If you are unsatisfied with our response, you have the right to lodge a complaint with the Data Protection Commission of Ireland or your local supervisory authority.

Updates to This Notice

We review and update this GDPR compliance notice periodically to reflect changes in our practices or applicable law.