GDPR Rights and Data Protection

Last Updated: January 2025

At qemtoo.com, we are committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR) and Irish data protection law. This page explains your rights and how to exercise them.

1. Introduction to GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies throughout the European Union, including Ireland. It gives individuals significant rights over their personal data and imposes strict obligations on organizations that process personal information.

As a data controller, qemtoo.com is responsible for ensuring your personal data is processed lawfully, fairly, and transparently.

2. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

2.1 Right to Be Informed

You have the right to know how we collect, use, store, and share your personal data. This information is provided in our Privacy Policy and on this page.

What this means:

  • We must tell you what data we collect
  • We must explain why we collect it
  • We must inform you how long we keep it
  • We must disclose who we share it with

2.2 Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request."

How to exercise this right:

  1. Email us at support@qemtoo.com with your request
  2. Provide sufficient information to verify your identity
  3. Specify what information you want to access
  4. We will respond within one month

What you will receive:

  • Confirmation of whether we process your data
  • A copy of your personal data in a readable format
  • Information about how we use your data
  • Details of who we share your data with
  • How long we keep your data

2.3 Right to Rectification

You have the right to have inaccurate personal data corrected or completed if it is incomplete.

How to exercise this right:

  1. Contact us at support@qemtoo.com
  2. Identify the incorrect or incomplete information
  3. Provide the correct information
  4. We will update your data within one month

Examples of rectification:

  • Correcting a misspelled name
  • Updating your email address
  • Adding missing contact information
  • Correcting inaccurate account details

2.4 Right to Erasure (Right to Be Forgotten)

You have the right to request deletion of your personal data in certain circumstances.

When this right applies:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • The data must be erased to comply with legal obligations

When this right does not apply:

  • We need the data to comply with legal obligations
  • The data is needed for legal claims
  • We have a legitimate interest that overrides your rights
  • The data is needed for public health purposes

How to request erasure: Email support@qemtoo.com with your request. We will assess your request and respond within one month.

2.5 Right to Restriction of Processing

You have the right to request that we limit how we use your personal data in certain situations.

When you can request restriction:

  • You contest the accuracy of the data (restriction applies while we verify)
  • Processing is unlawful but you prefer restriction over erasure
  • We no longer need the data but you need it for legal claims
  • You have objected to processing (restriction applies pending verification)

What restriction means:

  • We can store the data but not use it
  • We can only process with your consent
  • We can process for legal claims or to protect others' rights
  • We must inform you before lifting the restriction

2.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another organization.

When this right applies:

  • Processing is based on your consent or a contract
  • Processing is carried out by automated means

What you will receive:

  • Your data in CSV, JSON, or similar format
  • Data you provided to us directly
  • Information about your account and activities

How to request portability: Contact support@qemtoo.com and specify the format you prefer. We will provide your data within one month.

2.7 Right to Object

You have the right to object to processing of your personal data in certain circumstances.

Types of objection:

  • Direct marketing: You have an absolute right to object to processing for direct marketing purposes
  • Legitimate interests: You can object to processing based on legitimate interests unless we can demonstrate compelling legitimate grounds
  • Research and statistics: You can object to processing for research or statistical purposes unless necessary for public interest tasks

How to object:

  1. Email us at support@qemtoo.com
  2. Specify what processing you object to
  3. Explain your reasons for objecting
  4. We will assess your request and respond within one month

2.8 Rights Related to Automated Decision-Making and Profiling

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

Our practices:

  • We do not use automated decision-making that significantly affects you
  • If we implement such processing, we will inform you
  • You will have the right to human intervention
  • You can express your point of view and contest decisions

3. How to Exercise Your Rights

3.1 Contact Methods

To exercise any of your GDPR rights, contact us using:

  • Primary contact: support@qemtoo.com (24-hour support)
  • General enquiries: info@qemtoo.com
  • Data protection matters: contact@qemtoo.com

3.2 Information We Need

To process your request, we need:

  • Your full name
  • Email address associated with your account
  • Description of your request
  • Verification of your identity (for security purposes)
  • Any specific details about the data or processing you are concerned about

3.3 Response Times

We will respond to your request:

  • Standard response: Within one month
  • Complex requests: Up to three months (we will inform you if an extension is needed)
  • Acknowledgment: Within 72 hours of receiving your request

3.4 Fees

We do not charge fees for most requests. However, we may charge a reasonable fee if:

  • Your request is clearly unfounded or excessive
  • You request multiple copies of the same information
  • Your request requires disproportionate effort

We will inform you of any fees before processing your request.

4. Data Controller Information

4.1 Who We Are

The data controller responsible for your personal data is:

  • Company name: qemtoo.com
  • Address: 64 Willow Street, Zenith Park, Dublin, Ireland
  • Email: contact@qemtoo.com

4.2 Our Responsibilities

As a data controller, we are responsible for:

  • Determining the purposes and means of processing your data
  • Ensuring compliance with GDPR and Irish data protection law
  • Implementing appropriate security measures
  • Responding to your rights requests
  • Maintaining records of processing activities
  • Reporting data breaches when required

5. Cookie Management and Consent

5.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us provide and improve our services.

5.2 Types of Cookies We Use

  • Essential cookies: Required for basic website functionality (no consent needed)
  • Performance cookies: Help us understand website usage (require consent)
  • Functionality cookies: Remember your preferences (require consent)
  • Analytics cookies: Collect data about site performance (require consent)

5.3 Managing Cookie Preferences

Through our website:

  1. Click "Cookie Settings" in the cookie banner
  2. Select your preferences for each cookie category
  3. Save your choices

Through your browser:

  • Access your browser settings
  • Navigate to privacy or cookie settings
  • Block or delete cookies as desired
  • Note: Blocking essential cookies may affect website functionality

5.4 Withdrawing Cookie Consent

You can withdraw cookie consent at any time:

  • Use the cookie management tool on our website
  • Clear cookies through your browser settings
  • Contact us at support@qemtoo.com for assistance

6. Withdrawing Consent

6.1 When Consent Applies

We process some of your data based on your consent, such as:

  • Marketing communications
  • Newsletter subscriptions
  • Non-essential cookies
  • Optional data collection

6.2 How to Withdraw Consent

For marketing emails:

  • Click "Unsubscribe" in any marketing email
  • Update preferences in your account settings
  • Email support@qemtoo.com with your request

For other consent:

  • Contact support@qemtoo.com
  • Specify what consent you want to withdraw
  • We will process your request within 72 hours

6.3 Effect of Withdrawal

Withdrawing consent:

  • Does not affect the lawfulness of processing before withdrawal
  • May limit your access to certain features
  • Does not affect processing based on other legal grounds

7. Data Breaches

7.1 Our Commitment

We implement strong security measures to prevent data breaches. However, if a breach occurs that poses a risk to your rights and freedoms, we will:

  • Notify the Irish Data Protection Commission within 72 hours
  • Inform affected individuals without undue delay
  • Provide information about the breach and steps taken
  • Advise on measures you can take to protect yourself

7.2 What We Will Tell You

Breach notifications will include:

  • Nature of the breach
  • Categories and approximate number of affected individuals
  • Types of data involved
  • Likely consequences
  • Measures taken to address the breach
  • Contact information for further enquiries

8. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect data from children. If you are a parent or guardian and believe your child has provided us with personal data:

  • Contact us immediately at support@qemtoo.com
  • We will delete the information promptly
  • We will take steps to prevent future access

9. International Data Transfers

9.1 Transfers Outside the EU

If we transfer your data outside the European Economic Area, we ensure appropriate safeguards:

  • Standard contractual clauses approved by the European Commission
  • Adequacy decisions for countries with equivalent protection
  • Binding corporate rules for intra-group transfers
  • Certification schemes where applicable

9.2 Your Rights Regarding Transfers

You can:

  • Request information about safeguards in place
  • Obtain copies of standard contractual clauses
  • Object to transfers in certain circumstances

10. Complaints and Enforcement

10.1 Contacting Us First

If you have concerns about how we handle your data, please contact us first:

  • Email: support@qemtoo.com
  • We will investigate your complaint
  • We will respond within one month
  • We will work to resolve the issue

10.2 Supervisory Authority

If you are not satisfied with our response, you have the right to lodge a complaint with the supervisory authority:

Irish Data Protection Commission

  • Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
  • Phone: +353 (0)761 104 800
  • Website: www.dataprotection.ie
  • Email: info@dataprotection.ie

10.3 Your Right to Complain

You can complain to the supervisory authority about:

  • How we process your personal data
  • Our response to your rights requests
  • Data breaches or security concerns
  • Any GDPR compliance issues

11. Updates to This Page

We may update this GDPR Rights page to reflect changes in law or our practices. Check the "Last Updated" date to see when changes were made. Significant updates will be communicated through:

  • Email notification to registered users
  • Prominent notice on our website
  • In-platform notifications

12. Additional Resources

12.1 Related Pages

12.2 External Resources

  • Irish Data Protection Commission: www.dataprotection.ie
  • European Data Protection Board: edpb.europa.eu
  • EU GDPR Portal: gdpr.eu

13. Contact Information

For any questions about your GDPR rights or data protection:

  • 24/7 Support: support@qemtoo.com
  • General Enquiries: info@qemtoo.com
  • Data Protection Officer: contact@qemtoo.com
  • Postal Address: 64 Willow Street, Zenith Park, Dublin, Ireland

We are committed to protecting your privacy and respecting your data rights. If you have any questions or concerns, please do not hesitate to contact us.