Your data protection rights

Who handles your request

Projineer Limited, Kinsale, Co. Cork, Ireland, is the controller for the personal information covered by our privacy notice. That includes the details you send through the enquiry form and the emails we exchange with you.

You can send any data protection request to info@projineer.com or make it by phone on 021 471 2019.

Your rights and when they apply

Some of these rights apply whatever the reason we are using your information, while others depend on that reason. Our privacy notice sets out the reasons for each use. Where a right does not apply to your situation, or only applies in part, we will tell you why.

Access to your information

You can ask us to confirm whether we hold personal information about you and, if we do, for a copy of it (Article 15). Along with the copy, you are entitled to know:

• why we use it and what types of information it includes
• who we have shared it with or will share it with, and the safeguards that apply if it is transferred outside the European Economic Area
• how long we plan to keep it or, where that is not possible, how we decide
• where it came from, if you did not give it to us
• your other rights, including the right to complain to the Data Protection Commission
• whether any decisions about you are made by computer alone, which we do not do

If a copy would also reveal information about someone else, such as another person’s details in an email thread, we may need to remove or hold back that part to protect their rights. We will still give you as much of your own information as we can.

Correcting your information

If information we hold about you is wrong, you can ask us to correct it. If it is incomplete, you can ask us to complete it, which can include adding a statement from you (Article 16). You might have changed your phone number since you contacted us, for example, or we might have misspelt your name.

Deleting your information

You can ask us to delete your personal information without undue delay where one of the following applies (Article 17):

• we no longer need it for the reason we collected it
• we were relying on your consent, you have withdrawn it, and we have no other lawful basis for keeping it
• you have objected to our use of it and we have no overriding legitimate grounds to continue, or you have objected to direct marketing
• it has been used unlawfully
• we are legally required to delete it

This right does not apply where we need to keep the information, for example to meet a legal obligation such as keeping tax and company records after an engagement, or to establish, exercise or defend a legal claim. Our privacy notice explains how long we keep each type of record.

Restricting how we use your information

You can ask us to restrict your information, which means we keep it stored but do not otherwise use it, in four situations (Article 18):

• you have told us the information is inaccurate, for the time it takes us to check
• the information has been used unlawfully and you would rather we restricted it than deleted it
• we no longer need it, but you need us to keep it for a legal claim
• you have objected to our use of it, while we consider whether our legitimate grounds override yours

While a restriction is in place, we only use the information with your consent, for a legal claim, to protect the rights of another person or for reasons of important public interest. We will tell you before we lift a restriction.

When we tell others about a change

If we correct, delete or restrict your information at your request, we tell each person or organisation we have disclosed it to, unless that proves impossible or involves disproportionate effort. If you ask, we will tell you who they are (Article 19).

Taking your information elsewhere

You can ask for a copy of the personal information you gave us in a structured, commonly used and machine-readable format, and ask us to send it straight to another organisation where that is technically feasible (Article 20). This is known as data portability.

It applies only where we hold the information electronically and use it on the basis of your consent or a contract with you, which includes steps you asked us to take before entering a contract. It does not cover information we use on the basis of our legitimate interests, and it cannot be used in a way that affects other people’s rights.

Objecting to how we use your information

Where we use your information on the basis of our legitimate interests, such as answering a business enquiry, you can object on grounds relating to your particular situation (Article 21). We must then stop unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or we need the information to establish, exercise or defend a legal claim.

You can also object at any time to your information being used for direct marketing, and if you do, we must stop using it for that purpose without needing a reason from you. We do not send marketing emails from this website and there is no newsletter.

Withdrawing your consent

Where we rely on your consent, you can withdraw it at any time, and doing so should be as easy as giving it (Article 7(3)). Withdrawing consent does not make anything we did before you withdrew it unlawful.

On this website, consent covers Google Analytics cookies. You can change your choice at any time using Cookie settings in the footer of each page, and our cookie policy explains what happens to cookies that are already in your browser.

Decisions made by computer alone

You have the right not to be subject to a decision based solely on automated processing, including profiling, that has a legal effect on you or affects you in a similarly significant way (Article 22). We do not make any decisions of that kind.

How to make a request

Email info@projineer.com or call 021 471 2019. There is no form to fill in and no particular wording you need to use. The Data Protection Commission encourages people to make access requests in writing where practical, to avoid disputes later about what was asked for and when, so email is usually the better route for any request.

It helps us find the right information quickly if your request includes:

• your name, and the email address or phone number you used when you contacted us
• which right you want to use, for example a copy of your information or deleting it
• anything that narrows the search, such as the rough date or subject of your enquiry
• how you would like us to reply, if not by email

If someone else is making a request for you, such as a solicitor, we may ask for evidence that you have authorised them to act on your behalf.

Checking it is you

If we have reasonable doubts about who is making a request, we may ask for additional information to confirm your identity before we act on it (Article 12(6)). This is to make sure your personal information is not given to the wrong person, and we only ask for what we need for that check.

How long we have to respond

The time limits come from Article 12 of the GDPR and run from the day we receive your request.

If you make your request by email, we will reply electronically where possible, unless you ask us to use another method.

Fees

Using your rights is free of charge (Article 12(5)). The law allows two exceptions:

• if you ask for further copies of your information after the first one, we may charge a reasonable fee based on our administrative costs (Article 15(3))
• if a request is manifestly unfounded or excessive, in particular because it is repetitive, we may charge a reasonable fee based on our administrative costs or refuse to act on it

The second exception sets a high bar, and it is for us to show that a request meets it. If we decide it applies, we will explain our reasons to you.

If we cannot fully meet your request

Some rights apply only in certain circumstances, and the GDPR and the Data Protection Act 2018 set out exceptions. For example, we may need to keep information to meet a legal obligation or to deal with a legal claim, or we may need to hold back part of a copy that would reveal information about someone else.

If we cannot do all or part of what you asked, we will tell you which part, explain why, and remind you of your right to complain to the Data Protection Commission and to seek a remedy through the courts.

How to complain

You have the right to complain to the Data Protection Commission (DPC), Ireland’s data protection authority. The DPC’s guidance is to raise a concern with the organisation first, so we would ask you to contact us and give us the chance to put things right. If you are unhappy with our response, you can raise the matter with the DPC.

The DPC asks for complaints to be made in writing through its online form, which it describes as the most efficient way to get in touch. Its postal address and phone numbers are for general queries that do not relate to a case.

• Website: www.dataprotection.ie
• Complaints: the DPC online contact form
• Post: Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland
• Phone: (01) 765 01 00 or 1800 437 737, for general information only, as the DPC does not accept complaints by phone

If you live or work in another EU or European Economic Area country, you can instead complain to the data protection authority there, or in the country where you believe the breach of your rights took place (Article 77). You also have the right to bring a claim against us before the courts (Article 79).

Changes to this page

We update this page when the law or the way we handle requests changes. The date at the top shows the latest version. For how we use cookies, see the cookie policy, and for the terms that apply to this website, see the website terms.