GDPR Compliance

Last updated: August 14, 2026

Our Commitment to Data Protection

itercabido is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

itercabido acts as the data controller for personal information collected through our website and services.

Contact details:
itercabido
15 Parkgate Street
Dublin 8, D08 R6XN
Ireland
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfill contractual obligations
• Legitimate Interests: When processing serves our legitimate business interests while respecting your rights
• Legal Obligation: When required by law

Your Rights Under GDPR

Right to Access

You have the right to request confirmation of whether we process your personal data and to access that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data when:

• Data is no longer necessary for its original purpose
• You withdraw consent and no other legal basis exists
• You object to processing and no overriding legitimate grounds exist
• Data was processed unlawfully

Right to Restriction of Processing

You can request that we restrict processing of your personal data under certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

When processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence, workplace, or where an alleged infringement occurred.

For Ireland, the supervisory authority is the Data Protection Commission: www.dataprotection.ie

Exercising Your Rights

To exercise any of your rights, contact us at [email protected]. We will respond to requests within one month, with possible extension to two months for complex requests.

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Employee training on data protection
• Incident response procedures

Data Breach Notification

In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify the appropriate supervisory authority within 72 hours and inform affected individuals without undue delay.

Data Protection Impact Assessments

We conduct Data Protection Impact Assessments for processing activities that may result in high risk to individual rights and freedoms.

International Data Transfers

When transferring personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions
• Binding Corporate Rules where applicable

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children.

Updates to This Policy

We may update our GDPR compliance practices and this document. Material changes will be communicated through our website.