Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Personal Data We Collect

2.1 This website is informational in nature. We only collect personal data when you voluntarily provide it through:

• Contact forms (name, email address, message content).
• Service enquiries and information requests.
• Direct email correspondence.

2.2 We do not collect special categories of personal data (sensitive data) unless strictly necessary and with your explicit consent.

3. Purpose of Processing

3.1 Your personal data will be processed exclusively for:

• Responding to your enquiries and information requests.
• Managing pre-contractual or contractual relationships where applicable.
• Complying with applicable legal obligations.
• Protecting our rights and legitimate interests.

4. Legal Basis for Processing

4.1 We process your data on the following lawful bases:

• Consent (Art. 6(1)(a) GDPR): When you submit an enquiry.
• Contract performance (Art. 6(1)(b) GDPR): To manage requested services.
• Legitimate interest (Art. 6(1)(f) GDPR): To improve our services and security.
• Legal obligation (Art. 6(1)(c) GDPR): Regulatory compliance.

5. Data Retention

5.1 Your personal data will be retained for as long as necessary to fulfil the stated purposes.

5.2 Following the end of any relationship, data will be retained for applicable statutory limitation periods.

6. Disclosure to Third Parties

6.1 We do not share your personal data with third parties except:

• Essential service providers (hosting, email) under data processing agreements.
• Public authorities where legally required.

6.2 We do not transfer personal data outside the European Economic Area without appropriate safeguards.

7. Your Rights

7.1 Under GDPR, you have the right to:

• Access: Obtain confirmation of what personal data we process.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Limit processing in certain circumstances.
• Portability: Receive your data in a structured format.
• Objection: Object to processing based on legitimate interest.

7.2 To exercise these rights, contact legal@cuandeoro.io with a copy of valid identification.

7.3 You have the right to lodge a complaint with the Irish Data Protection Commission (DPC) or the supervisory authority in your country of residence.

8. Security Measures

8.1 We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction.

8.2 Our systems are designed following privacy by design and by default principles.

9. Cookies

For information on cookie usage, please refer to our Cookie Policy.

10. Amendments

Cuandeoro reserves the right to amend this Privacy Policy. Any changes will be published on this page with an updated revision date.