Overview
Clear information about your data.
GFR Group is the controller of personal data submitted through this website. This notice explains what information we collect, why we use it, how long we keep it and the rights available to you under data protection law.
Information we collect
When you contact us through the enquiry form or by email, we may receive your name, email address, subject, message and any project or business information you choose to provide. Our hosting and security providers may also process limited technical information, such as IP address, browser type, access time and requested pages, through standard server logs.
Why we use information
We use enquiry information to respond to you, assess a potential project or partnership, take steps requested before entering into a contract, maintain appropriate business records and protect the website from misuse. The relevant legal bases may include steps taken at your request before a contract, performance of a contract, legal obligations and our legitimate interests in responding to business enquiries and operating a secure website.
Sharing and international transfers
Information may be processed by service providers that support website hosting, security and business email. We do not sell personal data. Where a provider processes information outside the European Economic Area, we will rely on an applicable adequacy decision or appropriate contractual safeguards where required.
How long we keep information
Enquiry records are kept only for as long as reasonably necessary to respond, evaluate an opportunity, manage a resulting business relationship and meet legal, accounting or dispute-resolution requirements. Records that are no longer required are deleted or securely anonymised. Technical logs are retained according to the proportionate security and operational schedules of the relevant hosting provider.
Your rights
Control over your personal data.
Depending on the circumstances, you may request access to your personal data, correction, deletion, restriction, portability or object to processing. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
You may also lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.
Contact
Privacy enquiries.
To ask a question or exercise a data protection right, contact GFR Group at frank@gfr.ie. We may need to verify your identity before completing a rights request.