Our Data Protection Representative is Stephen O’Brien who can be contacted at firstname.lastname@example.org.
What data do we collect?
We may collect personally identifiable information and data about our clients and potential clients.
We collect the following data:
- Email address
- Telephone number
- Tax Number
- Log in details
- Digital Communications
- Hosting Details
- IP Address
- Financial Information (certain circumstances only)
In limited circumstances, we may also obtain certain sensitive personal data from our data subjects with their express consent where necessary for the performance of our obligations and provision of our services. Where such information is provided, the information will be shared only where necessary taking into account the nature of the information provided and the proposed services. Sensitive data will not be retained for any longer than necessary for the performance of the contracted service. We will not disclose sensitive personal data without your consent, the reliance of the contractual obligations, specifically authorised or required by law, protection of the vital interest of the data subject or of any other natural person or where necessary for the establishment, exercise or defence of legal claims. We will ensure that the processing of sensitive personal data is carried out in compliance with the GDPR at all times.
How do we collect your data?
We collect data from our data subjects and process it in the provision of our products and services as web development, branding, graphic design and marketing company.
We will collect data from our clients and potential clients through our website and directly from our clients and in particular through any email, telephone or personal enquiries made by our clients. We will also continue to collect their data through the performance of our obligations under the contracts for the provision of web development and branding services. We will operate as a data controller in respect of the personal data supplied by its clients and potential clients. We will collect personal data about you through the meetings, instruction forms, telephone consultations and any questionnaires which you may be asked to complete in the context of the provision of our services with records of all correspondence telephone calls, emails, details of your visit to the website, publicly available information including social media and through use of browser cookies.
OBRN will collect data primarily by way of direct production of the same by the data subject. On occasion, we may also receive your data indirectly via publicly available information including social networking sites.
How will we use your data?
We collect data from our clients and potential clients so that we can:
- Process your request for information regarding our services
- To prepare a scope of work and proposals for the provision of services
- To enable all necessary parties to manage accounts for the provision of those services
- To contact you with special offers on other services and updates which may be of interest to you
- To engage with you and respond to any requests which you may have.
- To improve our level of service
- For general marketing purposes which are in the legitimate interest of our business
- To process payments in connection with the provision of services to you
- To enable us to comply with our legal and contractual obligations to you and third parties
- To meet our legal and statutory obligations (including, defence of legal claims, if applicable)
Basis of processing data
We will process the data on behalf of natural persons comprising their clients, prospective clients, employees and contractors and will ensure that your data is processed in a lawful, clear and transparent manner at all times for a specific and legitimate purpose. We rely on the following legal basis for the processing of data.
- Processing necessary for the performance of a contract.
- Processing necessary for the compliance with a legal or statutory obligation.
- To protect the vital interest of a data subject.
- With the consent of the data subject for one or more specific and legitimate purposes.
- Processing necessary for the performance of a task carried out in the public interest or the exercise of official authority vested in the controller.
- Processing is necessary for the legitimate interest pursued by the controller or a third party except where such interest is overridden by the fundamental rights and freedoms of the data subject.
Where we rely on the legitimate interest of OBRN Media for the processing of the personal data, we will take all reasonable measures to ensure that the interests of the data subject are protected. The legitimate interests of the company in this context include direct marketing, prevention of fraud and information system security.
We will rely on our legitimate interests as a company to process your data for direct marketing purposes. We consider it to be a legitimate interest of our company in promoting its services, products and in the administrative operation of our business. Any such processing will not be carried out where such interest is overridden by the rights and freedoms of the data subject. In all direct marketing communications, we will give an unsubscribe option. A data subject can unsubscribe at any time.
We will only rely on consent as the basis for processing in limited circumstances. Where consent is utilised as the basis for processing, such consent can be withdrawn at any time. In that event, we will cease processing your data, unless there is a separate basis upon which we can rely to process your data, such as the same being necessary for the performance of the contract between us or necessary for us to comply with our legal and statutory obligations.
How do we store your data?
We would like to send marketing information to you about the products and/or services which we think will be of relevance to you. We will always give you an option to unsubscribe from our marketing list, please contact Stephen O’Brien at email@example.com if you wish to unsubscribe from our marketing list. You have a right to object to our processing your data for direct marketing purposes at any stage.
Sharing of personal data
Rights of data subject
You have the following rights under the GDPR, in certain circumstances and subject to certain exemptions, about your data:
- Right to access data – you have the right to request a copy of the personal data that we hold about you together with other information about our processing of that personal data.
- Right to rectification – you have the right to request that any inaccurate data that is held about you is corrected or if we have incomplete information you may request that we request that we update the information such that it is complete.
- Right to erasure – you have the right to request us to delete personal data that we hold about you. This is sometimes referred to as a right to be forgotten.
- Right to restrict processing or object to processing – you have the right to request that we no longer process your data for particular purposes or object to our processing of your data for a particular purpose
- Right to data portability – you have the right to request us to provide you or a third party with a copy of your data in a structured commonly used readable format.
- Right to object to processing – you have the right to object to the processing of data under certain conditions.
If you wish to exercise any of the rights set out above, please contact Stephen O’Brien at firstname.lastname@example.org.
We ask that you ensure that all data which you furnish to us is kept accurate and up-to-date at any stage. We cannot be held responsible for your failure to provide us with up-to-date information.
If we were processing personal data based on your consent, you may withdraw consent at any time. This does not affect the lawfulness of the processing which should take place before its withdrawal. You can object to the processing of your data for direct marketing purposes at any stage.
If you are unhappy with how we process your data, we ask that you contact us so that we can rectify the situation. You may complain with the Supervisory Authority of the Irish Supervisory Authority of the Data Protection Commission.
Automated decision-making & profiling
Changes to this privacy notice