Privacy Policy

Effective Date:

At gesporton.com, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or use our services, in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Irish Data Protection Act 2018, and the ePrivacy Directive 2002/58/EC.

1. Data Controller

The data controller responsible for your personal data is:

gesporton

Galway, Ireland

Email: ask@gesporton.com

Phone: +353 89 402 7116

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data: Name
Contact Data: Email address, phone number
Communication Data: Messages and enquiries submitted through our contact forms
Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform
Usage Data: Information about how you use our website, including pages visited, time spent on pages, and navigation paths
Newsletter Data: Email address provided when subscribing to our newsletter

3. How We Collect Your Data

We collect personal data through the following means:

Direct interactions: When you fill in our contact forms, subscribe to our newsletter, or correspond with us by email or phone
Automated technologies: As you navigate our website, we may automatically collect Technical Data and Usage Data through cookies, server logs, and similar technologies

4. Legal Basis for Processing

Under GDPR Article 6, we process your personal data based on the following legal grounds:

Consent (Article 6(1)(a)): When you subscribe to our newsletter or voluntarily submit your data through contact forms. You may withdraw consent at any time.
Contractual Necessity (Article 6(1)(b)): When processing is necessary to perform a contract with you or to take pre-contractual steps at your request, such as providing our virtual assistant services.
Legitimate Interests (Article 6(1)(f)): For operating and improving our website, analysing website usage, and ensuring network and information security, provided these interests are not overridden by your rights and freedoms.
Legal Obligation (Article 6(1)(c)): Where we are required by law to process your data, for example for tax, accounting, or regulatory purposes.

5. How We Use Your Personal Data

We use your personal data for the following purposes:

To respond to your enquiries and provide the services you have requested
To send you newsletters and marketing communications (only with your explicit consent)
To administer and improve our website and services
To analyse website traffic and user behaviour for optimisation purposes
To comply with legal and regulatory obligations

6. Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share your data with:

Service providers: Trusted third-party providers who assist us in operating our website, conducting business, or servicing you (e.g., web hosting, email service providers), bound by contractual obligations to keep your data confidential and process it only on our instructions
Legal authorities: Where required by law, regulation, or legal proceedings

Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions under GDPR Article 45.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website usage. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

Strictly Necessary Cookies: Essential for the website to function properly. These do not require consent.
Analytics Cookies: Help us understand how visitors interact with our website by collecting information anonymously.
Functional Cookies: Enable enhanced functionality and personalisation.

In accordance with the ePrivacy Directive and GDPR, we will obtain your consent before placing any non-essential cookies on your device. You may manage your cookie preferences through your browser settings at any time.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Specifically:

Contact form enquiries: Retained for up to 12 months after the last interaction, unless a contractual relationship is established
Newsletter subscriptions: Retained until you unsubscribe or withdraw consent
Contractual data: Retained for the duration of the contract plus 6 years to comply with Irish legal requirements
Website analytics data: Retained in anonymised form for up to 26 months

9. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you.
Right to Rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure (Article 17): You have the right to request deletion of your personal data where there is no compelling reason for its continued processing.
Right to Restriction of Processing (Article 18): You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Data Portability (Article 20): You have the right to request the transfer of your data to another organisation or directly to you, in a structured, commonly used, and machine-readable format.
Right to Object (Article 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at ask@gesporton.com. We will respond to your request within one month, as required by the GDPR.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

Secure HTTPS encryption for all data transmitted through our website
Regular review and updating of our security practices
Limiting access to personal data to authorised personnel only

11. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that data promptly.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those external sites. We encourage you to read the privacy policy of every website you visit.

13. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority. In Ireland, this is:

Data Protection Commission (DPC)

21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland

Phone: +353 1 765 0100 / +353 57 868 4800

Email: info@dataprotection.ie

Website: www.dataprotection.ie

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us: