Data Protection

Amden Group is committed to protecting personal data and to meeting its obligations under the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018. This page summarises how we put that commitment into practice. For detail on what we collect through this website and why, please read our Privacy Policy. Amden Group, Unit 39, Kells Business Park, Kells, Co. Meath, A82 PA44. Email: info@amden.ie. Phone: 046 927 4424.

Our role

For personal data collected through this website — enquiries, bookings and subscriptions — Amden Group acts as the data controller. When we deliver consultancy or systems services to client organisations, we may also act as a data processor on their behalf; in those cases our handling of personal data is governed by the agreement with that client.

The principles we follow

• Lawfulness, fairness and transparency — we tell you what we collect and why.
• Purpose limitation — we use personal data only for the purposes we collected it for.
• Data minimisation — we ask only for the information we need.
• Accuracy — we keep records up to date and correct errors when asked.
• Storage limitation — we keep personal data only as long as necessary.
• Integrity and confidentiality — we protect data with appropriate security measures.
• Accountability — we can demonstrate how we comply.

Safeguards

• Access to systems holding personal data is restricted to authorised team members with individual accounts and role-based permissions.
• Actions taken in the website administration area are recorded in an audit log.
• Enquiry, booking and subscription records carry a status so they can be tracked, actioned and removed when no longer needed.
• We review our forms and data collection regularly to make sure we are not collecting more than we need.

Service providers and international transfers

We use carefully selected service providers to host and operate this website and its database. Providers that process personal data on our behalf do so under contract and may only act on our instructions. Where a provider processes personal data outside the EU/EEA, we require appropriate safeguards, such as Standard Contractual Clauses, to be in place.

Personal data breaches

If a personal data breach occurs, we will assess the risk promptly, notify the Data Protection Commission within 72 hours where the law requires it, and inform affected individuals directly where the breach is likely to result in a high risk to their rights and freedoms.

Your rights and how to exercise them

You have the right to access, correct, erase, restrict or object to our use of your personal data, to data portability in certain circumstances, and to withdraw consent at any time. To exercise any of these rights, email info@amden.ie. We will respond as quickly as we can and always within the timeframes required by law.

If you are not satisfied with how we handle your personal data, you have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland — www.dataprotection.ie.

Changes to this statement

We may update this statement from time to time. The latest version will always be published on this page, and the “last updated” date above shows when it was most recently revised.