GDPR Compliance
Last Updated: September 18, 2026
Our Commitment to GDPR
atoll-stag.com is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws in Ireland and the European Union.
Data Controller Information
The data controller for the personal information processed through this website is:
atoll-stag
47 Merrion Square East
Dublin 2, D02 XF99
Ireland
Email: [email protected]
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Also known as the "right to be forgotten," you can request deletion of your personal data when:
- The data is no longer necessary for the purposes it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
- Erasure is required to comply with a legal obligation
Right to Restriction of Processing
You can request that we restrict processing of your personal data when:
- You contest the accuracy of the data
- Processing is unlawful but you oppose erasure
- We no longer need the data but you require it for legal claims
- You have objected to processing pending verification
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where an alleged infringement occurred.
In Ireland, the supervisory authority is:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Website: www.dataprotection.ie
How We Process Your Data
Lawful Basis
We process personal data only when we have a lawful basis:
- Consent: You have given clear consent for us to process your data for specific purposes
- Contract: Processing is necessary for a contract we have with you
- Legal obligation: Processing is necessary to comply with the law
- Legitimate interests: Processing is necessary for our legitimate interests or those of a third party
Data Minimization
We collect only the personal data that is necessary for the specified purposes and do not process it in ways incompatible with those purposes.
Data Accuracy
We take reasonable steps to ensure that personal data we hold is accurate and up to date.
Storage Limitation
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.
Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data
- Regular security assessments
- Access controls and authentication
- Employee training on data protection
Data Breach Notification
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
International Data Transfers
When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses approved by the European Commission
- Adequacy decisions by the European Commission
- Binding corporate rules
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Exercising Your Rights
To exercise any of your rights under GDPR, contact us at [email protected]. We will respond to your request within one month, though this may be extended by two additional months in complex cases.
We may request specific information from you to confirm your identity before processing your request.
Updates to This Information
We may update this GDPR compliance information periodically. The updated version will be indicated by the "Last Updated" date at the top of this page.