We implement appropriate technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing. We aim to ensure that the level of security and the measures adopted to protect your personal data are appropriate for the risks presented by the nature and use of your personal data.
Surveys, General Enquiries, Customer Service Queries - The legal basis we rely on for the processing of your personal data is for our legitimate interests i.e. we have good, sensible, practical reasons for processing your personal data which is in our interest. These include our interests to improve our products and services to follow up your enquiries. We have considered the impact on your interests and rights, and have placed appropriate safeguards to ensure that the intrusion on your privacy is reduced as much as possible. You can object to any of the processing that we carry out on the grounds of legitimate interests on grounds which are personal to you and we will consider any such objection in accordance with our legal obligations under Data Protection Laws.
Contests and promotions - The legal basis we rely on for the processing of your personal data is that processing is necessary for us to perform the contract you have agreed to enter with us (i.e. the terms and conditions of the contest/promotion). If you do not provide your personal data to us, we will not be able to carry out our obligations under the terms and conditions.
Newsletter - We process your personal data based on any consent you have given (if required) or in accordance with our legitimate interests in communicating with our customers, subject to any marketing preferences you have expressed to us.
Enforcing and Defending Our Rights - The legal basis we rely on for the processing of personal data for this purpose is for our legitimate interest in ensuring that our services and the website are used in accord- ance with our terms and conditions of use and policies and in establishing, exercising or defending a legal claim, a prospective legal claim, legal proceedings or prospective legal proceedings. We may also process personal data to comply with legal obligations.
These providers (together with any other IT or business support service providers we may engage from time to time) process your personal data as part of the services they offer to us. We take steps to ensure that our service providers process your data in accordance with the Data Protection Laws, only use it in accordance with our contract with them and keep it secure. If you would like more information about our processors, please contact us using the details at the "How to contact us" section. Your personal data is transferred outside of Ireland and the EEA in order for website hosting services provided by Amazon Web Services which is in US and Mark Anthony Group in Canada who provide the Management of website and any IT services to us. It may be necessary for other transfers outside the EEA to occur in accordance with the business practices of any other of the above service providers we may engage from time to time. Any transfer of your data to recipients outside the EEA will be carried out in accordance with the Data Protection Laws to safeguard your privacy rights. If you have any questions around the transfer mechanisms used by us, please contact us using the contact details in the 'How to Contact Us' section.
We only retain your personal data for as long as we need it in order to provide you with the service you have requested from us.
The above periods may be extended if any of the above is retained by us in the context of your purchase of a product or a legal process.
As a data subject, you have the following rights under the Data Protection Laws:
Rights in relation to automated decision making do not apply as we do not carry out any automated decision making.
If you would like to exercise your rights, please contact us at the details set out above in the section "How to contact us" section.
We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within three months.
Please note that exceptions apply to some of these rights which we will apply in accordance with the law.
Alternatively, you can send your complaint to the Data Protection Commission. Information about how to do this is available on its website at www.dataprotection.ie. If you are located in a different EU Member State, you can also lodge a complaint with your local data protection authority. In any case, we would ask that you contact us in the first instance so that we can assist you with your query or concern.