Privacy Notice

1. Who We Are

Réiteach Consultancy Limited trading as RegSol and RegSol Ireland is a company limited by shares registered in Ireland with CRO Number 618712 and is a Data Controller within the meaning of the General Data Protection Regulations and Irish data protection legislation.

In this privacy notice “we”, “us”, “our” or “RegSol” and RegSol.ie means Réiteach Consultancy Limited.

You can contact us using the following methods:

Email - info@regsol.ie
Phone - 01 539 4884
Post - 20 Harcourt Street, Dublin 2

2. What Personal Data do we Process?

We comply with the current Irish and European law on data protection. You do not have to supply us with any of your data if you choose not to and you may ask us to delete any of your personal data that we may hold.

We collect information:

1. you give us (such as when making an enquiry or signing up to one of our training sessions);
2. information generated during the provision of our services and;
3. information provided to us by third parties (such as your employer for training or consultancy services).

• identity details such as your name, job title, etc.
• contact details such as email address, phone number, etc.
• employment record details.

2.1 Information We Need

If you do not provide certain information, we may not be able to provide the requested services to you. We will tell you when we ask for information which is not a contractual requirement or is not needed to comply with our legal obligations.

3. How and Why We Process Personal Data

We obtain, store and process information about data subjects (our clients, training attendees, potential clients, and e-learning users,) in the context of our business for the purpose of providing our consultancy and training services.

Information on data subjects is obtained via email, phone, and sign up for training courses via the relevant booking platform. We may also be contacted on social media and individuals can subscribe to receive our newsletter and updates via LinkedIn (please note LinkedIn services are subject to LinkedIn’s privacy notice).

3.1 Legal basis for Processing

Contract - Our primary legal basis for processing personal data in the context of providing our services is contractual (use is necessary to provide a service or fulfil a contract that you have entered into (e.g. to provide you with training or consultancy services) or because you have asked for something to be done so you can enter into a contract with us).

Consent - For subscribers to email/newsletter updates, the legal basis for processing is consent – you have taken a positive action to subscribe, and you may unsubscribe at any time to indicate withdrawal of your consent.

Legitimate Interests - We also rely on legitimate interests for processing certain data such as promoting our business to other businesses, managing our business, training staff, and for fraud or other crime prevention purposes. This may include things like training and quality assurance, strategic planning, statistical analysis of our service provision. You may object to your personal information being used for these purposes.

Legal Obligation - In some situations, processing may be necessary because we have to comply with a legal obligation (e.g. complying with obligations to report to regulatory authorities or law enforcement, etc.).

Vital Interests - In exceptional circumstances, processing may be necessary to protect your “vital interests” (e.g. communicating with employers/medical staff in the case of a training attendee or employee suffering a medical event).

4. Who do we share data with?

We do not disclose your personal data to anyone outside of RegSol without your consent other than the situations below:

• Where the proper handling of your work or provision of our services to you requires disclosure;
• on a confidential basis to auditors where they are authorised by our client to review work completed;
• to our professional indemnity insurers (where our client is a single person business);
• where compelled by professional regulations (including your regulators) or by law, such as a court order;

Where we engage services providers to assist us in providing our services, we will always ensure that they are complaint with Irish and European Data Protection law and subject to a written agreement that includes adequate protection of your data.

5. Do we Transfer your data Abroad?

We have made all reasonable efforts to retain all of our systems and processing activities within the EU/EEA area and our primary client management records are held on servers within the EU.

With respect to training, however, we currently utilise services provided by companies based in the US – this includes our public training booking system and our E-Learning platform. In all cases we have endeavoured to ensure that service providers are compliant with GDPR and have written agreements in place with the service providers.

6. How long do we keep your data?

The length of time in respect of which we keep your personal data depends on the processing activity; however, we will not hold your data for longer than is necessary for the purpose(s) for which it was obtained. We will process your data in accordance with our retention schedule.

7. Your Privacy Rights

Applicable data protection laws may give you the right to control how we process your personal data. These include:

1. The right to request access to and a copy of your personal information;
2. The right to object to processing of your personal information, or to request rectification or erasure of your personal information;
3. The right to restrict processing of your personal information;
4. The right to data portability;
5. Where we are using your personal information with your consent, you also have the right to withdraw your consent at any time, though this will not affect our uses of your personal information prior to the withdrawal of your consent;
6. The right to complain to the Data Protection Commission.

If you wish to exercise any of these rights, please contact us and we will endeavor to respond as soon as possible.

If we are unable to deal with your request fully within a calendar month (due to the complexity or number of requests) we may extend this period by a further two calendar months and shall explain to you the reason why. If you make your request electronically, we will try to provide you with the relevant information electronically.

7.1 DPC Complaints

If you are not happy with any aspect of how your data is used, you have the right to complain to the Data Protection Commission in Ireland. You can contact the Office of the Data Protection Commission at:

 Telephone: +353 (0)761 0100 or Lo Call Number 1800 437 737
 Online Contact Form: https://forms.dataprotection.ie/contact
 Postal Address: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28