Data Protection Statement

FireEscapePlans.ie (hereafter referred to as "we", "us" and "our") is committed to protecting and respecting your privacy. This Data Protection Statement tells you about your privacy rights and sets out how we, as a Controller, collect, use, process and disclose your personal data relating to your interactions with us. This Data Protection Statement should be read in conjunction with our Cookie Policy.

Introduction

We fully respect your right to privacy, and will not collect any personal information about you from this website without your consent. Any personal information which you volunteer to us will be treated with the highest standards of security and confidentiality, strictly in accordance with the requirements of Ireland's Data Protection Act 2018.

We appreciate the trust you place in us when sharing your personal data. In this document, we will explain how we collect, use and protect your personal data. We will also tell you about rights you have as a Data Subject.

Purpose and Scope

This Data Protection Statement is a requirement of the EU's GDPR (General Data Protection Regulation), which is transposed into Irish law under the Data Protection Act 2018. The GDPR is a pan-European data protection law, which superseded the EU’s 1995 Data Protection Directive, and all member state law based on that directive, on 25 May 2018. Significant and wide-reaching in scope, it expands the rights of individuals to control how their personal data is collected and processed, and places a range of new obligations on organisations to be more accountable for data protection. The GDPR also gives member states limited opportunities to make provisions or derogations for how the Regulation applies in their country, as Ireland has done with the Data Protection Act 2018 which came into effect from 25 May 2018.

What is Personal Data?

Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute personal data.

Personal data that has been de-identified, encrypted or pseudonymised but can be used to re-identify a person remains personal data and falls within the scope of the GDPR.

Personal data that has been rendered anonymous in such a way that the individual is not or no longer identifiable is no longer considered personal data. For data to be truly anonymised, the anonymisation must be irreversible.

The GDPR protects personal data regardless of the technology used for processing that data – it’s technology neutral and applies to both automated and manual processing, provided the data is organised in accordance with pre-defined criteria (for example alphabetical order). It also doesn’t matter how the data is stored – in an IT system, through video surveillance, or on paper; in all cases, personal data is subject to the protection requirements set out in the GDPR.

Examples of personal data:

• A name and surname.
• A home address;
• An email address such as name.surname@company.com.
• An identification card number.
• Location data (for example the location data function on a mobile phone).
• An Internet Protocol (IP) address.
• A cookie ID.
• The advertising identifier of your phone.
• Data held by a hospital or doctor, which could be a symbol that uniquely identifies a person.

Examples of data not considered personal data:

• A company registration number.
• An email address such as info@company.com.
• Anonymised data.

Collection of personal data

We collect personal data from you for one or more of the following purposes:

• To provide you with information that you have requested or that we think may be relevant to a subject in which you have demonstrated an interest.
• To initiate and complete commercial transactions with you, or the entity that you represent, for the purchase of products and/or services.
• To fulfil a contract that we have entered into with you or with the entity that you represent. In these circumstances it may be your entity, rather than yourself, that has provided us with your personal data.
• To ensure the security and safe operation of our websites and underlying business infrastructure.
• To manage any communication between you and us.

Technical information
In addition, to ensure that each visitor to our website can use and navigate the site effectively, we collect the following:

• Technical information, including the IP (Internet Protocol) address used to connect your device to the Internet.
• Your login information (where trade customers are provided with secured access to a restricted part of our site), browser type and version, time zone setting, browser plug-in types and versions.
• Operating system and platform.
• Information about your visit, including the URL (Uniform Resource Locators) clickstream to, through, and from our site.
• Our cookies policy, which can be viewed from a link on the bottom of the page on our web site, describes in detail how we use cookies.

Phone Calls
We do not audio record or retain audio recordings of phone conversations. Where an individual contacts us by phone, caller numbers are automatically stored on the recipient phone for a limited period of time in a list of inbound and outbound calls, but no further processing of this data (caller numbers) is carried out by us. During the course of dealing with a query or other matter, we may record personal data received by us during the course of phone calls in the form of notes.

Emails / Contact Forms
All emails sent to the us are recorded, forwarded to the relevant section or staff member and are stored for the purposes of the matter to which the email relates. The sender’s email address will remain visible to all staff tasked with dealing with the query. Please be aware that it is the sender’s responsibility to ensure that the content of their emails does not infringe the law. Unsolicited unlawful material, together with the details of the sender, may be reported to An Garda Síochána and/or other relevant authorities and further emails from such recipients may be blocked.

Post
Post received by the us may be scanned and stored for the purpose of the matter to which the post item relates. Original hard copy versions of post items are retained and are then confidentially destroyed when no longer required.

Lawful basis for the processing of personal data

We only collect forms of personal data where there is a lawful basis for processing this data. We have processes in place to make sure that only those people in our organisation who need to access your data can do so.

When we process on the lawful basis of legitimate interest, we apply the following test to determine whether it is appropriate:

• The purpose test – is there a legitimate interest behind the processing?
• Necessity test – is the processing necessary for that purpose?
• Balancing test – is the legitimate interest overridden, or not, by the individual’s interests, rights or freedoms?

Storage and retention of your personal data

Our website and web applications are hosted in the EU and are accessed only by our EU-based staff. Our customer relationship management, marketing and accounting systems are all EU-based. Our payment processors and banking arrangements are based in the EU. We ship and deliver physical products around the world; we therefore use logistics companies that are based outside the EU and operate in other countries. We have appropriate legal and security relationships with those partners.

We will store your personal data only for as long as necessary for the purpose(s) for which it was obtained. The criteria used to determine our retention periods include (a) the length of time we have an ongoing relationship and/or provide our services; (b) whether there is a legal requirement to which we are subject; and (c) whether the retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

Disclosure of your personal data

We may disclose your personal data to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or where necessary for our legitimate business interests to protect the rights, property, or safety of RescueMate Ltd, for the purposes of fraud protection and credit risk reduction.

Security measures

We are committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorised access and use. As effective as modern security practices are, no physical or electronic security system is entirely secure. We cannot guarantee the complete security of our database, nor can we guarantee that information you supply will not be intercepted while being transmitted to us over the Internet. We have implemented strict internal guidelines to ensure that your privacy is safeguarded at every level of our organisation. We will continue to revise policies and implement additional security features as new technologies become available. Where we have given you a password which enables you to access certain parts of our website, you are responsible for keeping that password confidential. We ask you not to share your password with anyone.

Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our website. Any transmission of personal data is at your own risk. Once we receive your personal data, we use appropriate security measures to seek to prevent unauthorised access or disclosure.

Links to other sites

Our website may, from time to time, contain links to and from other websites. If you follow a link to any of those websites, please note that those websites have their own privacy policies and we do not accept any responsibility or liability for those policies. Please check those policies before you submit any personal data to those websites.

Your rights as a data subject

Under data protection law, data subjects have certain rights. You can exercise these rights in relation to your personal data that is processed by us.

The data subject rights are:

• The right to be informed about the processing of your personal data;
• The right to access your personal data.
• The right to rectification of your personal data.
• The right to erasure of your personal data.
• The right to data portability.
• The right to object to processing of your personal data.
• The right to restrict processing of your personal data.
• Rights in relation to automated decision making, including profiling.

Changes to this Data Protection Statement

We reserve the right to change this Data Protection Statement from time to time at our sole discretion. If we make any changes, we will post those changes here and update the “Last Updated” date at the bottom of this Data Protection Statement. However, if we make material changes to this Data Protection Statement we will notify you by means of a prominent notice on the website prior to the change becoming effective. Please review the Data Protection Statement whenever you access or use this website.

Contact Us

Questions, comments, requests and complaints regarding this Data Protection Statement and the personal data we hold are welcome and should be addressed to:

Data Protection Officer, FireEscapePlans.ie
Email: info@FireEscapePlans.ie

Last Updated: 31st of March, 2020