GDPR Compliance

Our Commitment to GDPR

electric-vein is committed to full compliance with the General Data Protection Regulation (GDPR). We respect your data protection rights and have implemented measures to ensure your personal information is processed lawfully, fairly, and transparently.

Data Controller Information

electric-vein is the data controller responsible for your personal data. Our contact details are:

electric-vein
42 Fitzwilliam Square
Dublin 2, D02 R124
Ireland
Email: [email protected]

Lawful Basis for Processing

We process your personal data only when we have a lawful basis to do so. The legal grounds we rely on include:

1. Consent

We obtain your explicit consent before processing personal data for specific purposes such as marketing communications or cookies. You can withdraw consent at any time.

2. Contract Performance

We process your data to fulfill our contractual obligations when you engage our pension dispute resolution services.

3. Legal Obligation

We process data when required by Irish or EU law, including tax obligations, regulatory requirements, and court orders.

4. Legitimate Interests

We may process data based on legitimate business interests, such as fraud prevention, network security, and business development, provided these interests do not override your fundamental rights.

Your GDPR Rights

Under GDPR, you have comprehensive rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used format within one month.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to have it corrected or completed.

Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data in certain circumstances, such as when it's no longer necessary for the purpose it was collected or if you withdraw consent.

Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider where technically feasible.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of your GDPR rights, contact us at:

• Email: [email protected]
• Write to: Data Protection Officer, electric-vein, 42 Fitzwilliam Square, Dublin 2, D02 R124, Ireland

We will respond to your request within one month. This period may be extended by two additional months where necessary, considering the complexity and number of requests.

Data Protection Principles

We adhere to the core GDPR principles:

• Lawfulness, fairness, and transparency: We process data lawfully and explain how we use it
• Purpose limitation: We collect data for specific, legitimate purposes
• Data minimization: We only collect data that is necessary
• Accuracy: We keep data accurate and up-to-date
• Storage limitation: We don't keep data longer than necessary
• Integrity and confidentiality: We protect data with appropriate security measures
• Accountability: We can demonstrate our compliance

Data Security Measures

We implement appropriate technical and organizational security measures including:

• Encryption of personal data in transit and at rest
• Access controls limiting data access to authorized personnel only
• Regular security assessments and vulnerability testing
• Staff training on data protection and security best practices
• Secure backup and disaster recovery procedures
• Confidentiality agreements with all staff and contractors

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the Data Protection Commission within 72 hours of becoming aware of the breach
• Notify affected individuals without undue delay if the breach poses a high risk
• Provide clear information about the nature of the breach and our response measures

International Data Transfers

We primarily process data within the European Economic Area. When transfers outside the EEA are necessary, we ensure appropriate safeguards such as:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequacy decisions
• Binding Corporate Rules where applicable

Third-Party Data Processors

We only work with third-party processors who guarantee GDPR compliance. All processors are bound by data processing agreements that specify:

• The subject matter and duration of processing
• The nature and purpose of processing
• Security obligations and breach notification procedures
• Restrictions on sub-processing

Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

Complaints

If you believe we have not handled your personal data in compliance with GDPR, you have the right to lodge a complaint with the Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Phone: +353 (0)761 104 800
Email: [email protected]
Website: www.electric-vein.com

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We will notify you of significant changes and update the revision date at the top of this page.

Contact Us

For questions about our GDPR compliance or to exercise your rights, please contact our Data Protection Officer:

Email: [email protected]