General Data Protection Regulation (GDPR)

What is the GDPR?

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area. It provides protection for individuals' rights and freedoms regarding the processing of their personal data.

At sprout-lumen, we are fully committed to GDPR compliance and the protection of your personal information.

Your Rights Under the GDPR

Under the GDPR, you have the following rights:

1. The Right to Be Informed

You have the right to receive information about how we process your personal data, why we process it, and with whom it is shared.

2. The Right of Access

You can request a copy of your personal data held by us. This information will be provided to you free of charge within one month of your request.

3. The Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request that it be corrected or completed.

4. The Right to Erasure ("The Right to Be Forgotten")

In certain circumstances, you can request the deletion of your personal data. This includes when:

• The data is no longer necessary for the purpose for which it was collected
• You withdraw your consent
• You object to the processing and there are no overriding legitimate grounds
• The data was unlawfully processed

5. The Right to Restrict Processing

You can ask us to restrict the processing of your data in certain circumstances, such as when you contest the accuracy of the data.

6. The Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer those data to another controller.

7. The Right to Object

You can object to the processing of your personal data in certain circumstances, including direct marketing and profiling.

8. Rights Related to Automated Decision-Making and Profiling

You have protections against decisions based solely on automated processing, including profiling, which produce legal effects concerning you.

How to Exercise Your Rights

To exercise any of these rights, you can contact us:

• By email: [email protected]
• By post: sprout-lumen, 42 Harcourt Street, Dublin 2, Ireland

We will respond to your request within one month. In complex cases, a two-month extension may be required, but we will inform you of any delay.

Legal Basis for Processing

אנहम ذاتی ڈیٹا کو درج قانونی بنیادوں پر پروسیس کرتے ہیں:

• Consent: When you give us explicit permission to process your data
• Contract: When processing is necessary to perform a contract with you
• Legal obligation: When required by law to process data
• Legitimate interests: When processing is necessary for our legitimate interests, provided your rights are not overridden

International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure your data is protected by:

• Transfers to countries with adequacy decisions from the European Commission
• Using standard contractual clauses
• Implementing other appropriate safeguards

Data Breaches

In the event of a data breach that may pose a risk to your rights and freedoms, we will notify the supervisory authority within 72 hours. If there is a high risk, we will also inform you directly.

Lodge a Complaint

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the data protection authority:

The Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
Ireland
[email protected]

Data Protection Officer

We have appointed a Data Protection Officer to oversee GDPR compliance. You can contact them at [email protected].

Changes to This Policy

We reserve the right to change this policy at any time. Any significant changes will be communicated to you via a notice on our website.