GDPR Compliance

Our Commitment to GDPR

moniressui is committed to compliance with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Union and European Economic Area.

Data Controller Information

For the purposes of GDPR, moniressui acts as the data controller for personal information collected through this website and our business operations.

Data Controller:
moniressui
32 Fitzwilliam Square
Dublin 2, D02 RX83
Ireland
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases as defined by GDPR:

Consent (Article 6(1)(a))

When you submit forms on our website or accept cookies, we process data based on your freely given, specific, informed consent. You may withdraw this consent at any time.

Legitimate Interests (Article 6(1)(f))

We process certain data based on our legitimate business interests, including website improvement, security, and business development. We ensure these interests do not override your fundamental rights and freedoms.

Contractual Necessity (Article 6(1)(b))

When you engage our services, we process data necessary to perform our contractual obligations to you.

Legal Obligation (Article 6(1)(c))

We process data when required to comply with legal obligations, such as accounting and tax requirements.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access (Article 15)

You have the right to obtain confirmation whether we process your personal data and to access that data along with specific information about the processing.

Right to Rectification (Article 16)

You may request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure (Article 17)

Under certain circumstances, you can request deletion of your personal data, including when data is no longer necessary for its original purpose or when you withdraw consent.

Right to Restriction of Processing (Article 18)

You may request limitation of processing under specific conditions, such as when you contest data accuracy or object to processing.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object (Article 21)

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making (Article 22)

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by two additional months for complex requests. We will inform you of any extension and the reasons for it.

We may request specific information from you to confirm your identity before processing rights requests.

Data Protection Principles

We adhere to the GDPR data protection principles:

• Lawfulness, Fairness, Transparency: We process data lawfully, fairly, and transparently
• Purpose Limitation: We collect data for specified, explicit, legitimate purposes
• Data Minimization: We collect only data adequate and relevant for our purposes
• Accuracy: We take reasonable steps to ensure data accuracy
• Storage Limitation: We retain data only as long as necessary
• Integrity and Confidentiality: We process data securely
• Accountability: We demonstrate compliance with these principles

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Staff training on data protection
• Incident response procedures

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also communicate the breach to affected individuals without undue delay.

International Data Transfers

When we transfer personal data outside the EU/EEA, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions confirming adequate protection levels
• Other legally approved transfer mechanisms

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected or as required by law. Specific retention periods:

• Contact form submissions: 2 years from submission
• Client project data: Duration of engagement plus 7 years for legal requirements
• Website analytics data: 26 months
• Cookie data: As specified in our Cookies Policy

Third-Party Processors

We engage third-party service providers who process data on our behalf. We ensure these processors:

• Provide sufficient guarantees of GDPR compliance
• Process data only on our documented instructions
• Maintain appropriate security measures
• Assist us in responding to data subject requests
• Delete or return data upon service termination

Children's Data

Our services are not directed to children under 16. We do not knowingly process data of children without parental consent as required by GDPR.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, particularly in your EU member state of residence, workplace, or where an alleged infringement occurred.

For Ireland, the supervisory authority is:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Website: dataprotection.ie

Updates to This Notice

We may update this GDPR compliance notice to reflect changes in our practices or legal requirements. Material changes will be communicated through our website with an updated "Last Updated" date.

Contact Information

For questions about our GDPR compliance or to exercise your rights, contact us at:

Email: [email protected]
Address: 32 Fitzwilliam Square, Dublin 2, D02 RX83, Ireland