GDPR Compliance

Last updated: September 2026

Our Commitment to GDPR

vibrant-nebula is committed to ensuring compliance with the General Data Protection Regulation (GDPR) and protecting the personal data of our website visitors and clients. This page outlines our approach to data protection and explains your rights under the GDPR.

Data Controller

vibrant-nebula acts as the data controller for personal data collected through this website. As data controller, we are responsible for deciding how personal data is processed and for what purposes.

Our contact details are:

vibrant-nebula
42 Grafton Street
Dublin 2, D02 HW94
Ireland

Email: [email protected]

Personal Data We Process

We may process the following categories of personal data:

• Identity data: name and title
• Contact data: email address
• Technical data: IP address, browser type and version, time zone setting, operating system
• Usage data: information about how you use our website
• Communication data: your preferences in receiving communications from us

Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. The lawful bases we rely on are:

• Consent: You have given clear consent for us to process your personal data for a specific purpose.
• Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate interests: Processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.
• Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

Your Rights Under GDPR

The GDPR provides you with the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a "data subject access request".

Right to Rectification

You have the right to request that we correct any personal data that is inaccurate or incomplete.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, also known as the "right to be forgotten".

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by a further two months, in which case we will inform you.

There is no fee for exercising your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Data Security

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing personal data. These measures are designed to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

International Transfers

We may transfer personal data outside the European Economic Area (EEA). When we do so, we ensure that appropriate safeguards are in place to protect your personal data in accordance with GDPR requirements.

Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Data Protection Commission (DPC), the supervisory authority in Ireland:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland

Website: www.dataprotection.ie

Changes to This Information

We may update this GDPR information from time to time. We encourage you to review this page periodically for the latest information on our data protection practices.