This Notice supplements our Privacy Policy and explains, in concrete terms, the rights that the General Data Protection Regulation grants you in relation to the processing of your personal data by Finquest Capital Limited as data controller, and how to exercise those rights.
Send a written request, in any of the following ways:
Please include: (i) your full name and contact details; (ii) a clear description of the right you wish to exercise and, where relevant, the data or processing concerned; (iii) any details enabling us to identify the relevant relationship (for example: date of contact, name of the Finquest staff member, or reference of the matter).
To protect your personal data we may need to verify your identity before acting on a request. We will only request information that is reasonable and proportionate, and we will retain that verification material only for as long as needed to evidence the request.
We will respond to your request without undue delay and in any event within one month of receipt. We may extend that period by a further two months where necessary, taking into account the complexity and number of the requests; in that case we will notify you within the first month and explain the reasons. Action on your request is free of charge. Where requests are manifestly unfounded or excessive — in particular because of their repetitive character — we may charge a reasonable fee or refuse to act, in accordance with Article 12(5) GDPR.
We will respond in writing and explain whether and to what extent we have given effect to your request. Where we do not act on a request, we will inform you of the reasons and of your right to lodge a complaint with a supervisory authority and to seek a judicial remedy.
You may at any time lodge a complaint with the Irish Data Protection Commission (DPC) — 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland — info@dataprotection.ie — www.dataprotection.ie. You may also lodge a complaint with the supervisory authority of the EU Member State of your habitual residence, place of work or place of the alleged infringement.
Where we process special categories of personal data within the meaning of Article 9 GDPR (for example, biometric data captured during identity verification), we do so only where one of the conditions of Article 9(2) GDPR applies — typically explicit consent or a substantial public interest in the prevention of money laundering and terrorist financing.
We maintain a record of processing activities pursuant to Article 30 GDPR. A description of the records relevant to a specific data subject is available on request, subject to applicable confidentiality and security requirements.
Finquest Capital Limited, No. 12, Commerce House, 14 Washington Street West, Cork City, Cork, T12 K376, Ireland.