GDPR Information

About GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on 25 May 2018. It governs how organisations collect, process, and protect personal data of individuals within the European Union and European Economic Area.

At Lush-Cliff, we are committed to complying with GDPR requirements and ensuring transparent handling of your personal information.

Your Rights Under GDPR

The GDPR provides you with several important rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to such requests promptly.

Right to Erasure

Also known as the "right to be forgotten," you may request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You may request that we limit how we use your data while we address concerns you have raised about its accuracy or our legal basis for processing it.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transfer it to another organisation.

Right to Object

You may object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you, unless certain conditions apply.

Data Controller Information

Lush-Cliff is the data controller responsible for your personal information. Our contact details are:

Lush-Cliff
42 Fitzwilliam Square
Dublin 2, D02 K283
Ireland

Email: [email protected]

Lawful Basis for Processing

We process personal data based on one or more of the following lawful bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for performance of a contract with you or to take steps at your request before entering a contract
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
• Legal Obligation: Processing is necessary for compliance with a legal obligation

Data Protection Officer

For any questions regarding your data protection rights or to exercise any of the rights described above, please contact our data protection team:

Email: [email protected]

Filing a Complaint

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Data Protection Commission of Ireland:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland

Website: www.dataprotection.ie

Updates to This Information

We may update this GDPR information page periodically to reflect changes in our practices or legal requirements. The date of the last update will be indicated at the top of the page.