GDPR Compliance

Last updated: July 2026

magenta-rain is committed to protecting the privacy and security of your personal data in accordance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 2018. This page outlines how we comply with GDPR and explains your rights under this regulation.

Our Role as Data Controller

magenta-rain acts as the data controller for personal data collected through our website and in the course of providing our services. This means we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection laws.

Principles We Follow

We adhere to the following GDPR principles when processing your personal data:

Lawfulness, Fairness, and Transparency

We process personal data lawfully, fairly, and in a transparent manner. We clearly communicate how and why we use your data through our Privacy Policy and other notices.

Purpose Limitation

We collect personal data only for specified, explicit, and legitimate purposes. We do not process data in ways that are incompatible with those purposes.

Data Minimisation

We collect only the personal data that is necessary for our stated purposes. We do not collect excessive or unnecessary information.

Accuracy

We take reasonable steps to ensure that personal data is accurate and, where necessary, kept up to date. We provide mechanisms for you to update your information.

Storage Limitation

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law.

Integrity and Confidentiality

We implement appropriate technical and organisational measures to ensure the security of personal data, protecting it against unauthorised access, loss, or damage.

Your Rights Under GDPR

The GDPR provides you with specific rights regarding your personal data:

Right to Access

You have the right to obtain confirmation of whether we process your personal data and to access that data along with information about how we use it.

Right to Rectification

You have the right to have inaccurate personal data corrected and incomplete data completed.

Right to Erasure (Right to be Forgotten)

In certain circumstances, you have the right to have your personal data deleted. This applies when the data is no longer necessary, you withdraw consent, or the data was unlawfully processed.

Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us using the details below. We will respond to your request within one month. In complex cases, we may extend this by up to two months, but we will inform you of any such extension.

We may need to verify your identity before processing your request. We will not charge a fee for most requests, but may charge a reasonable fee for manifestly unfounded or excessive requests.

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have given clear consent for us to process your data for a specific purpose
• Contract: Where processing is necessary to perform a contract with you or take steps at your request before entering into a contract
• Legal obligation: Where processing is necessary to comply with a legal obligation
• Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests

International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Transfers to countries with an adequacy decision from the European Commission
• Standard contractual clauses approved by the European Commission
• Other legally recognised transfer mechanisms

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Supervisory Authority

If you are not satisfied with how we handle your personal data or your GDPR request, you have the right to lodge a complaint with the Data Protection Commission of Ireland:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Website: www.dataprotection.ie

Contact Our Data Protection Lead

For any questions about GDPR compliance or to exercise your rights, please contact us at:

magenta-rain
42 Grafton Street
Dublin 2, D02 HW94
Ireland
Email: [email protected]

Please include "GDPR Request" in your subject line to help us process your enquiry promptly.