Data Controller
For purposes of the General Data Protection Regulation, dapper-lark acts as data controller for personal information collected through this website. We are based in Ireland and operate under Irish and EU data protection law.
Legal Basis for Processing
We process personal information under the following legal bases:
Consent: When you submit inquiry forms, you provide explicit consent for us to process the information you share for purposes of responding to your request.
Legitimate Interests: We collect technical information through website logs based on legitimate interest in maintaining site security, preventing fraud, and improving user experience. These interests are balanced against your privacy rights.
Contract Performance: If you become a client, we process information necessary to fulfill contractual obligations and provide agreed services.
Your Rights Under GDPR
You have comprehensive rights regarding personal data we hold:
Right of Access: Request confirmation of what personal data we process about you and obtain a copy of that data.
Right of Rectification: Request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
Right to Restriction: Request limitation of processing in certain circumstances, such as when you contest data accuracy.
Right to Data Portability: Receive personal data you provided in structured, commonly used format, and transmit it to another controller.
Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making: We do not use automated decision-making or profiling that produces legal or similarly significant effects.
Exercising Your Rights
To exercise any GDPR rights, contact us at: contact at dapper-lark.com
We will respond to requests within one month. In complex cases, we may extend this by two additional months, and will inform you of any such extension.
You will not be charged for exercising your rights unless requests are clearly unfounded or excessive, in which case we may charge a reasonable fee or refuse the request.
Data Protection Officer
Given our organizational size and processing activities, we are not required to appoint a formal Data Protection Officer. Privacy inquiries should be directed to the contact information provided above.
International Data Transfers
Personal data is stored and processed within the European Economic Area. We do not transfer data to countries outside the EEA unless such transfers comply with GDPR requirements through appropriate safeguards.
Supervisory Authority
You have the right to lodge complaints with supervisory authorities if you believe we have processed your personal data unlawfully. In Ireland, the relevant authority is the Data Protection Commission.
Data Breach Notification
In the event of a data breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay. We will also notify relevant supervisory authorities as required by law.
Children's Privacy
Our services are not directed toward individuals under age 16. We do not knowingly collect personal data from children. If we become aware we have inadvertently collected such data, we will delete it promptly.