Data Privacy Notice

This notice is provided by ARC Architectural Consultants Ltd (Company Registered Number 372842) whose registered office is at 30 Dalkey Park, Dalkey, Co. Dublin and is addressed to all clients who we provide services to. It applies both during and after our relationship or contract with you.

This notice relates to personal information about you from which you can be identified and how we collect and process your personal data. We refer to this information throughout this notice as personal data. Personal data does not include data where the identity has been removed (anonymous data). There are “special categories” of more sensitive personal data which require a higher level of protection.

We are the controller of your personal data. This means that we are responsible for deciding how we hold and use personal data about you. As a controller we use (or ‘process’) the personal data we hold on you in accordance with this notice.

We take our data protection responsibilities seriously and this notice reflects the obligations set out in the General Data Protection Regulation (EU Regulation 2016/679) (GDPR) and any laws in Ireland giving effect to its provisions.

If you need to contact us in connection with our processing of your personal data, then you can do so at:

ARC Architectural Consultants Ltd 30 Dalkey Park Dalkey Co. Dublin Ph. 01 2350525 / E: info@arc.ie

Your personal data belongs to you and it is your choice whether you provide us with your personal data. However, because we require certain items of your personal data in order to perform our contractual obligations to you, please be aware that if you do not provide all of the personal data we request from you then we may not be able to fulfil all our contractual obligations to you. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.

This notice may be amended or updated from time to time. Please regularly check our website review any changes made.

What information will we collect, and why?

We collect and process personal data about you, below is a non-exhaustive list of the types of data we collect and process:

We collect this information directly from you and in some instances from third parties, such as agents, planning authorities or public sources.

Why do we collect and process this data?

We collect and process this data for the performance of our contract, processing invoices and for management and administration purposes. We use the data to manage our relationship with you effectively, lawfully and appropriately, during our relationship, at the time when the relationship ends, and after our relationship has ended.

If you object to providing data required for our contract, we may be unable in some circumstances to comply with our obligations and we will tell you about the implications of that decision.

Legal Basis

To process your personal data in connection with the purposes set out above, we will rely most commonly on one or more of the following legal bases:

Who is your data shared with?

Other than as mentioned below, we will only disclose information about you to third parties if we are legally obliged to do so (such as Revenue) or where we need to comply with our contractual duties to you, for instance we may need to pass on certain information to our external providers.

Your personal data will not be transferred outside of the EEA. In the event that your personal data is required to be transferred outside of the EEA, we will take the appropriate additional safeguards to ensure the protection of your data, such as entering into Standard Contractual Clauses.

We choose our service providers carefully and require them to take appropriate security measures to protect your personal data. We will share your personal data with the following recipients:

Retention of Data

We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

If in the future we intend to process your personal data for a purpose other than that which it was collected we will notify you.

Your rights

The personal data that we hold about you must be accurate and current. Please inform us if your personal data changes during your working relationship with us.

Under certain circumstances, you have the right to:

Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate personal data that we hold about you corrected.

Request erasure of your personal data. This enables you to ask us to delete or remove personal data after we no longer need to process it.

Object to processing of your personal data if we are relying on our legitimate interest (or those of a third party) and your particular situation makes you want to object to processing on this ground. You also have the right to object if we are processing your personal data for direct marketing purposes.

Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you if, for example, you want us to establish its accuracy or the reason for processing it.

Request the transfer of your personal data to another party.

If you want to review, verify, correct or request erasure of your personal data, object to the processing of your personal data or request that we transfer a copy of your personal data to another party, please contact the Data Protection Representative, Amy Hastings, for more information.

We do not charge a fee to give you access to your personal data or to exercise any of the other rights described above. We may, however, charge a reasonable fee if your request for access is clearly unfounded or excessive or we may refuse to comply with the request.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information or to exercise any of your other rights. This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

Automated Decision Making

We do not envisage that any decisions will be taken about you using automated means, however we will notify you in writing if this position changes.

Right to Withdraw Consent

If for some reason you provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact the Data Protective Representative, Amy Hastings, at info@arc.ie. Once we receive notification that you withdrew your consent, we will no longer process your personal data for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

Changes

We reserve the right to update this Privacy Notice at any time. We will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.

Identity and contact details of controller

If you have any concerns as to how your data or, if you want to review, verify, correct or request erasure of your personal data, object to the processing of your personal data or request that we transfer a copy of your personal data to another party, please contact the Data Protection Representative, Amy Hastings, at info@arc.ie or by post at:

ARC Architectural Consultants Ltd 30 Dalkey Park Dalkey Co. Dublin