GDPR Compliance

1. Overview

rustic-seed is committed to compliance with the General Data Protection Regulation (GDPR) and related data protection legislation. This document outlines how we process personal data in accordance with GDPR requirements.

2. Data Controller Information

rustic-seed acts as the data controller for personal information collected through this website and during service provision.

Contact details:
Email: [email protected]
Address: 28 Fitzwilliam Square East, Dublin 2, D02 X889, Ireland

3. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you explicitly agree to data processing
• Contract: When processing is necessary for service delivery
• Legitimate interests: For business operations that do not override your rights
• Legal obligation: When required by law

4. Data Subject Rights

Under GDPR, you have the following rights:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of such data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data under certain circumstances, including when data is no longer necessary for the purposes collected.

Right to Restriction

You may request limitation of processing activities in specific situations.

Right to Data Portability

You may request transfer of your personal data to another controller in a structured, commonly used format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

5. Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with your request. We will respond within one month, though this may be extended in complex cases.

You may also lodge a complaint with the Data Protection Commission (Ireland) if you believe your rights have been violated.

6. Data Processing Activities

We process personal data for the following purposes:

• Consultation request management
• Service delivery and client communication
• Website functionality and improvement
• Legal compliance and dispute resolution

7. Data Sharing and Transfers

Personal data may be shared with:

• Service providers who support our operations (hosting, email services)
• Legal and professional advisors when necessary
• Law enforcement or regulatory bodies when legally required

We ensure appropriate safeguards are in place for any international data transfers.

8. Data Security Measures

We implement technical and organizational security measures including:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and updates
• Staff training on data protection principles
• Incident response procedures

9. Data Retention

Personal data is retained only as long as necessary for the purposes collected or as required by law. Specific retention periods vary by data type and purpose.

10. Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach.

11. Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children without parental consent.

12. Updates to This Document

This GDPR compliance document may be updated to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised date.

13. Contact and Questions

For questions about our GDPR compliance or data protection practices, contact us at [email protected]