GDPR - General Data Protection Regulation

Effective Date: January 1, 2026

1. Introduction

At nebula-cypress, we are committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and Irish data protection laws. This page outlines how we fulfill our obligations under the GDPR and the rights you possess.

2. Who We Are

nebula-cypress is the data controller for the personal data we collect. You can contact us at:

nebula-cypress
47 O'Connell Street
Dublin, D01 X2Y3
Ireland

[email protected]

3. Your Rights Under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

3.1 The Right of Access

You have the right to request a copy of your personal data that we hold. We will provide this information free of charge within one month of the request.

3.2 The Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it.

3.3 The Right to Erasure (The Right to Be Forgotten)

You have the right to request that we delete your personal data under certain circumstances, such as:

• When the data is no longer necessary for the purpose for which it was collected
• When you withdraw your consent
• When you object to the processing

3.4 The Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while you are disputing the accuracy of the data.

3.5 The Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer them to another controller.

3.6 The Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

3.7 Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significant effects on you.

4. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may need to take an additional two months, but we will inform you of this.

5. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. These include:

• Encryption of sensitive data
• Restricted access controls
• Regular security reviews
• Staff training on data protection

6. Data Breaches

In the event of a personal data breach, we will notify the Data Protection Commission within 72 hours if it is likely to impact individuals' rights and freedoms. If there is a high risk to your rights and freedoms, we will also inform you directly.

7. International Transfers

Normally, we do not transfer your personal data outside the European Economic Area (EEA). If a transfer becomes necessary, we will ensure that appropriate safeguards are in place, such as standard contractual clauses.

8. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland

Website: www.dataprotection.ie

9. Changes to This Policy

We may update this GDPR policy from time to time. We will post any changes on this page and update the effective date.