GDPR Compliance Statement

Last Updated: September 3, 2026

Our Commitment to Data Protection

russet-tundra is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and Irish data protection legislation.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you submit forms on our website, you provide explicit consent for us to process your information
• Legitimate Interests: Processing necessary for our business operations and service provision
• Legal Obligations: Compliance with applicable laws and regulations

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data under certain circumstances, including when data is no longer necessary for the purposes collected.

Right to Restriction of Processing

You may request limitation of how we process your data in specific situations.

Right to Data Portability

You may request transfer of your data to another service provider in a structured, commonly used format.

Right to Object

You may object to processing of your personal data based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

How to Exercise Your Rights

To exercise any of these rights, contact us at:

Email: [email protected]
Address: 28 Fitzwilliam Square, Dublin 2, D02 X489, Ireland

We will respond to requests within one month of receipt. In complex cases, this period may be extended by two additional months.

Data Protection Officer

For matters related to data protection, you may contact our Data Protection Officer at [email protected].

Supervisory Authority

You have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have not complied with GDPR requirements.

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland

International Data Transfers

We do not transfer personal data outside the European Economic Area. All data processing occurs within EU jurisdiction.

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments
• Staff training on data protection

Data Breach Notification

In the event of a personal data breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay.