Data controller
Everblue Digital is the data controller for personal data collected through our website (everbluedigital.com) and in the course of providing our services. Our contact details are:
- Email: [email protected]
- Address: Cavan Digital Hub, Kilmore Business Park, Dublin Road, Co. Cavan H12 PD82, Ireland
Lawful bases for processing
We process personal data under the following lawful bases as defined in Article 6 of the GDPR:
- Consent (Art. 6(1)(a)): When you submit a contact form, book a strategy call, or subscribe to communications. You may withdraw consent at any time.
- Performance of a contract (Art. 6(1)(b)): When we need to process your data to deliver services you have engaged us for.
- Legitimate interests (Art. 6(1)(f)): For website analytics, improving our services, and preventing fraud. We balance our interests against your rights and freedoms.
- Legal obligation (Art. 6(1)(c)): Where we are required by law to process or retain data (e.g., tax records, regulatory requirements).
Data subject rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15): Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): Request deletion of your data where there is no compelling reason for continued processing.
- Right to restrict processing (Art. 18): Request that we limit how we use your data.
- Right to data portability (Art. 20): Request your data in a structured, machine-readable format.
- Right to object (Art. 21): Object to processing based on legitimate interests or direct marketing.
- Right not to be subject to automated decision-making (Art. 22): We do not use automated decision-making or profiling that produces legal effects.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
Data protection contact
For all data protection enquiries, including requests to exercise your rights, contact:
- Email: [email protected]
- Address: Data Protection, Everblue Digital, Cavan Digital Hub, Kilmore Business Park, Dublin Road, Co. Cavan H12 PD82, Ireland
Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form submissions: Retained for up to 2 years, or until you request deletion.
- Client project data: Retained for the duration of the client relationship plus 6 years (for legal and tax compliance).
- Website analytics data: Anonymised and retained for up to 26 months.
- Marketing communications: Until you unsubscribe or withdraw consent.
International data transfers
Our primary data storage is within the EU. Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Transfers to countries recognised by the EU as providing adequate data protection
Data breach procedures
In the event of a personal data breach, we will:
- Notify the relevant supervisory authority within 72 hours where feasible, if the breach is likely to result in a risk to individuals' rights and freedoms
- Notify affected individuals without undue delay where the breach is likely to result in a high risk
- Document all breaches, including facts, effects, and remedial actions taken
Supervisory authority
If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with a supervisory authority. For Ireland, this is:
- Data Protection Commission (DPC)
- Website: www.dataprotection.ie
- Phone: +353 (0)1 765 0100 / 1800 437 737
- Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Related policies
This GDPR statement should be read alongside our Privacy Policy, which provides further detail on how we collect, use, and protect your personal data.