GDPR Compliance

About GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on 25 May 2018. It applies to all organisations processing personal data of individuals in the European Union, regardless of where the organisation is located.

At dusk-manta, we are committed to ensuring full compliance with GDPR requirements and protecting the privacy rights of all individuals whose data we process.

Our Role

dusk-manta acts as a data controller for personal data collected through our website and in the course of providing our consulting services. This means we determine the purposes and means of processing personal data.

When working with clients on projects that involve their customer data, we may act as a data processor, processing data on their behalf according to their instructions.

Data Protection Principles

We adhere to the following principles when processing personal data:

• Lawfulness, fairness, and transparency: We process data lawfully and are transparent about how we use it
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes
• Data minimisation: We collect only the data necessary for our purposes
• Accuracy: We take reasonable steps to ensure data is accurate and up to date
• Storage limitation: We retain data only for as long as necessary
• Integrity and confidentiality: We implement appropriate security measures
• Accountability: We can demonstrate compliance with these principles

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to be Informed

You have the right to know how your personal data is being used. Our Privacy Policy provides detailed information about our data processing activities.

Right of Access

You can request a copy of the personal data we hold about you. We will respond to such requests within one month.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

In certain circumstances, you can request that we delete your personal data. This right is not absolute and applies only in specific situations.

Right to Restrict Processing

You can request that we limit how we use your data while we address concerns you have raised.

Right to Data Portability

You can request your data in a structured, commonly used, machine-readable format for transfer to another service provider.

Right to Object

You can object to processing based on legitimate interests, including profiling. You can also object to direct marketing at any time.

Rights Related to Automated Decision Making

We do not use automated decision-making processes that produce legal effects or similarly significant effects on individuals.

Exercising Your Rights

To exercise any of your rights, please contact us using the details below. We may need to verify your identity before processing your request. We will respond to all legitimate requests within one month, though this may be extended by two further months for complex requests.

There is generally no fee for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

Data Breach Procedures

We have procedures in place to detect, investigate, and report personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you directly and inform the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Transfers to countries with an adequacy decision
• Binding corporate rules for transfers within our corporate group

Complaints

If you are not satisfied with how we handle your data or respond to your requests, you have the right to lodge a complaint with the Data Protection Commission in Ireland:

We encourage you to contact us first so we can attempt to resolve any concerns directly.

Contact Us

For any questions about GDPR or to exercise your rights, please contact: