GDPR Compliance

Our Commitment to GDPR

geyser-reach is fully committed to complying with the General Data Protection Regulation (GDPR). As a company based in Ireland within the European Union, we recognise the importance of protecting personal data and respecting the privacy rights of individuals.

Data Controller

geyser-reach acts as the data controller for personal information collected through this website and our services. We determine the purposes and means of processing personal data.

Contact details:
geyser-reach
Unit 14, Innovation House
Sandyford Business Park
Dublin 18, D18 Y2X7
Ireland
Email: [email protected]

Lawful Basis for Processing

We only process personal data when we have a lawful basis to do so. The bases we rely upon include:

• Consent: You have given clear, informed consent for us to process your personal data for specific purposes. You may withdraw this consent at any time.
• Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, provided these interests do not override your fundamental rights and freedoms.
• Legal Compliance: Processing is necessary to comply with legal obligations to which we are subject.

Your Data Protection Rights

Under GDPR, you have comprehensive rights regarding your personal data:

Right of Access (Article 15)

You have the right to obtain confirmation of whether we process your personal data and to access that data along with supplementary information about the processing.

Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete data completed.

Right to Erasure (Article 17)

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose for which it was collected.

Right to Restriction of Processing (Article 18)

You have the right to request that we restrict processing of your data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at [email protected]

We will respond to your request within one month of receiving it. This period may be extended by two further months where necessary, taking into account the complexity and number of requests.

We will verify your identity before processing requests to ensure we do not disclose personal data to unauthorised individuals.

Data Protection Principles

We adhere to the core principles of GDPR:

• Lawfulness, Fairness, and Transparency: We process data lawfully, fairly, and in a transparent manner.
• Purpose Limitation: We collect data for specified, explicit, and legitimate purposes.
• Data Minimisation: We collect only data that is adequate, relevant, and limited to what is necessary.
• Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date.
• Storage Limitation: We retain personal data only for as long as necessary for the purposes for which it was collected.
• Integrity and Confidentiality: We process data in a manner that ensures appropriate security.
• Accountability: We are responsible for and able to demonstrate compliance with these principles.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Irish Data Protection Commission within 72 hours of becoming aware of the breach.

Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

International Data Transfers

Where we transfer personal data outside the European Economic Area, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with an adequacy decision
• Binding Corporate Rules where applicable

Complaints

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with the Irish Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland

We would, however, appreciate the opportunity to address your concerns before you approach the supervisory authority, so please contact us in the first instance.

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.