Data Protection

Sirius Tech Data Privacy Statement and Protection Policy

GDPR Policy for SIRIUS Technologies & I.T resourcing Limited.

​

1. Introduction

​

Sirius Tech Limited recognises the importance of data protection and is committed to complying with the General Data Protection Regulation (GDPR) 

and other relevant data protection laws. This policy outlines our approach to data protection and we comply with our obligations under the 

General Data Protection Regulation 2016/679.

2. Purpose of Data Processing

​

Personal data is collected, processed, and stored for the following purposes:

Providing IT services to clients.

Managing customer relationships and inquiries.

Employee management and HR purposes.

Compliance with legal and regulatory requirements.

3. Lawful Basis for Processing

​

We process personal data on the following lawful bases:

Performance of a contract.

Compliance with legal obligations.

Legitimate interests pursued by the company.

4. Types of Data Collected

​

We collect the following types of personal data:

Customer data: names, addresses, contact details.

Employee data: employment history, contact details, payroll information.

Technical data: IP addresses, device information.

5. What we do with Personal Data?

• We process Personal Data provided to us only for the purposes of fulfilling our commercial objectives and complying with our statutory obligations.These obligations include:

• Payroll;

• making corporate discounts available to employees;

• distributing company announcements;

• providing information on all Sirius Tech Limited products.

• invoicing;

• tax returns;

• offers/discounts to customers; and

• any other business related purposes.

• Sirius Tech Limited will not disclose Personal Data to third parties unless the Data Subject has consented to this disclosure or unless the disclosure to the third party is required to manage a customer order or employee relationship (and in such circumstances, the third party is bound by similar data protection requirements).  However Sirius Tech Limited will disclose Personal Data to third parties if we believe in good faith that we are required to disclose it in order to comply with any applicable law, a summons, a search warrant, a court or regulatory order, or other statutory requirement.

• In compliance with the provisions of the GDPR, all Personal Data held, collected or furnished by Sirius Tech Limited will be kept only for lawful purposes. 

• Sirius Tech Limited will use Personal Data relating to customers, suppliers and employees, through whichever medium it is collected, for the purpose for which it was collected, including the performance of obligations or rights under any commercial or employment agreement which Sirius Tech Limited may enter into with an employee, supplier or customer. 

6. Data Subject Rights

​

Individuals have the following rights regarding their personal data:

Right to access.

Right to rectification.

Right to erasure.

Right to data portability.

Right to object.

Data subject requests should be submitted to the email address at datarequest@siriustech.ie

7. Data Security Measures

​

We implement technical and organisational measures to ensure data security, including encryption, access controls, and regular security audits.

​

8. Data Transfers

​

Personal data may be transferred to third parties outside the European Economic Area (EEA) in compliance with GDPR requirements, including the use of standard contractual clauses.

9. Data Breach Response Plan

We have procedures in place to detect, report, and respond to data breaches, including notifying affected individuals and relevant authorities within 72 hours of becoming aware of a breach.

10. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this policy and in accordance with legal requirements. Data that is no longer needed will be securely deleted or anonymized.

11. Third-Party Data Processors

We engage third-party service providers who process personal data on our behalf. These providers are selected based on their ability to meet GDPR standards and are bound by data processing agreements.

12. Staff Training

All employees receive training on GDPR compliance and data protection best practices to ensure awareness of their responsibilities.

13. Policy Review and Updates

This policy is reviewed regularly to ensure compliance with GDPR and other relevant data protection laws. Updates will be communicated to employees as necessary.

14. Legal Compliance Statement

Sirius Tech is committed to complying with GDPR regulations and protecting the privacy and security of personal data.

​