Data Protection Policy

Version: 22 May 2018

The EU General Data Protection Regulation (GDPR) is the most significant piece of European privacy legislation. It replaces the 1995 EU Data Protection Directive (European Directive 95/46/EC),strengthening the rights that EU individuals have over their data, and creating a uniform data protection law across Europe.

JJ O’Toole will comply with the GDPR as a data controller and processor when it takes effect on 25th May 2018.

Please note that we may amend this policy on a regular basis. Please visit this page to keep up to date.

1. WHO IS REPONSIBLE FOR DATA PROTECTION?
+353 61 229333
info@jjotoole.ie.

2. WHY DO WE KEEP YOUR DATA?
JJ O’Toole only collect the personal information of our customers to keep them up to date with JJ O’Toole related information or special offers that have come available to them as JJ O’Toole customers.

3. WHAT PERSONAL DATA DO WE KEEP ABOUT YOU?
Your first name, surname and email address.

4. WHO DO WE SHARE THIS DATA WITH?
We do not share this data with anyone outside of JJ O’Toole.

5) WHERE DID WE FIND YOUR DATA?
You applied through our website or directly to us by email.

6) WHERE IS YOUR DATA STORED AND PROCESSED?
You information is held and processed on our own internal servers and on a nightly basis backups are made to a NAS internal storage system (HD back up disks).  We also have remote off site nightly backups with our IT company, DB Computer Solutions for our accounts data.

7) HOW LONG DO WE KEEP YOUR DATA?
We keep your data for 12 months from your last interaction with us or through us, or until you tell us to delete your data, whichever is the shortest.

8) HOW DO WE PROTECT YOUR DATA?
To protect your information we have installed multiple securities – Zyxel Firewall / Antivirus / antispam, antimalware and RDF securities.

9) UNDER THE GDPR YOU HAVE THE RIGHT TO:

• Be informed
• Access the data we hold about you
  
• Restrict the processing of your data
• Rectify the data we hold about you
• Erasure (right to be forgotten)
• Data portability
• Object to the use of your data
• Not to be subject to automated decision-making and profiling

10) HOW CAN YOU EXERCISE YOUR RIGHTS AS A DATA SUBJECT?
Email our Data Protection Contact, at info@jjotoole.ie or call +353 61 229333 with the right you wish to exercise in the subject line.

Please be aware that you may be asked for a proof of identity, which will not be kept after processing your request. We may also need to ask for more information about your request to process it.

Under the GDPR we have 30 days to comply with your request, unless we have a legal obligation preventing us to do so; in which case we will share that reason with you.

11) I HAVE A QUESTION THAT IS NOT COVERED IN THIS DOCUMENT
Please contact our Data Protection Contact, info@jjotoole.ie or call +353 61 229333.

12) WHAT DATA DO YOU COLLECT WHEN I VISIT YOUR SITE?
We collect cookie data from visitors to our website for Google Analytics purposes. This lets us know what pages were viewed and what was purchased.

SUPPLIER DATA: 
We collect very little data about our Suppliers. We’ll collect the details for our contacts within your organisation, such as names, telephone numbers and email addresses. We’ll also collect company bank details so that we can pay you. We may also hold extra information that someone in your organisation has chosen to tell us.