GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

tide-drift is committed to compliance with the General Data Protection Regulation (GDPR) and protecting the rights of individuals whose personal data we process. This page outlines your rights under GDPR and explains how we meet our obligations.

Data Controller Information

tide-drift acts as a data controller for personal information collected through our website and service delivery. Our contact details are:

tide-drift
23 Harcourt Street
Dublin 2, D02 YW24
Ireland
Email: [email protected]

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract
• Legal obligation: Where processing is necessary to comply with the law
• Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, unless those interests are overridden by your rights

Your Rights Under GDPR

Under the GDPR, you have the following rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will respond to valid requests within one month.

Right to Rectification

You have the right to request correction of personal data we hold about you that is inaccurate or incomplete.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose for which it was collected.

Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis.

Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you. We do not engage in automated decision making.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to legitimate requests within one month, though this may be extended by two further months where requests are complex or numerous.

Data Protection Officer

For queries about data protection matters, please contact us at the address above.

Supervisory Authority

If you are not satisfied with our response to your request or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Data Protection Commission in Ireland:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland

International Transfers

Where we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.