General Data Protection Regulation
GDPR - Your Rights and Our Obligations
What is GDPR?
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area. It gives individuals new rights regarding their personal data and places obligations on organizations that process personal data.
Our Role as Data Controller
We, valley-peak, are the data controller regarding your personal information. This means we determine how and why your personal data is processed.
We are committed to complying with the following principles:
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimization
- Accuracy
- Storage limitation
- Integrity and confidentiality
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you give us explicit permission
- Contract: When processing is necessary to perform a contract with you
- Legal Obligation: When required by law
- Legitimate Interests: When we have a legitimate business interest that does not override your rights
Your Rights Under GDPR
Under the GDPR, you have the following rights:
The Right to Information
You have the right to know how we use your personal data.
The Right of Access
You can request a copy of the personal data we hold about you.
The Right to Rectification
You can request correction of incorrect or incomplete information.
The Right to Erasure
You can request that your personal data be deleted in certain circumstances.
The Right to Restrict Processing
You can request that processing of your data be restricted.
The Right to Data Portability
You can request to receive your data in a structured format.
The Right to Object
You can object to the processing of your personal data.
How to Exercise Your Rights
To exercise any of these rights, contact us at:
Email: [email protected]
We will respond to your request within 30 days.
International Data Transfers
If your data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
Complaints
If you believe we are not handling your data properly, you have the right to lodge a complaint with the competent data protection authority. In Ireland, this is the Data Protection Commission:
The Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
Ireland
Changes to This Information
We may update this GDPR information from time to time. We recommend reviewing this page regularly.
Last updated: September 2026