Our Commitment to GDPR
Frosty Sprout is committed to compliance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 2018. We take our responsibilities as a data controller seriously and have implemented comprehensive measures to protect your personal data.
Data Controller Information
For the purposes of applicable data protection legislation, the data controller is:
Frosty Sprout
42 Fitzwilliam Square West
Dublin 2, D02 P447
Ireland
Email: [email protected]
Principles of Data Processing
We adhere to the core principles of GDPR in all our data processing activities:
- Lawfulness, fairness and transparency: We process data lawfully and transparently, ensuring you understand how your data is used
- Purpose limitation: We collect data only for specified, explicit, and legitimate purposes
- Data minimisation: We collect only the data necessary for the intended purpose
- Accuracy: We take reasonable steps to ensure data is accurate and kept up to date
- Storage limitation: We retain data only for as long as necessary
- Integrity and confidentiality: We implement appropriate security measures to protect data
- Accountability: We maintain records to demonstrate compliance
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You may request a copy of the personal data we hold about you. We will respond to such requests within one month and provide the information free of charge.
Right to Rectification
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will address such requests promptly.
Right to Erasure
In certain circumstances, you may request deletion of your personal data. This includes situations where the data is no longer necessary for its original purpose, or where you withdraw consent.
Right to Restriction of Processing
You may request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format.
Right to Object
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We may ask you to verify your identity before processing your request. We will respond to all valid requests within one month, though this may be extended for complex requests.
Data Breach Procedures
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and report the breach to the Data Protection Commission within 72 hours.
Third-Party Data Processors
Where we engage third parties to process personal data on our behalf, we ensure appropriate contractual safeguards are in place to protect your data. These processors are bound by confidentiality obligations and may only process data for the specified purposes.
International Transfers
Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are implemented, such as Standard Contractual Clauses approved by the European Commission.
Complaints
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Data Protection Commission:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Website: www.dataprotection.ie
Updates to This Information
We may update this GDPR compliance information from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated through our website.