Your GDPR Rights

1. Your Data Protection Rights

Under the General Data Protection Regulation (GDPR), you have specific rights regarding your personal data. Celtic Treasures is committed to helping you exercise these rights easily and effectively.

This page explains your rights and how to exercise them. If you have any questions, contact us at support@mancinagross.com.

2. Data Controller Information

3. Right of Access (Article 15)

You have the right to request copies of your personal data that we hold.

What you can request:

• Confirmation that we process your personal data
• A copy of your personal data we hold
• Information about how we use your data
• Details about data sharing with third parties
• How long we retain your data
• Information about your other GDPR rights

How to request:

• Email us at support@mancinagross.com
• Include "Data Access Request" in the subject line
• Provide proof of identity (copy of ID or passport)
• Specify what information you want to access

Response time: We will respond within one month of receiving your request.

4. Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected or completed if it is incomplete.

What you can request:

• Correction of inaccurate personal data
• Completion of incomplete personal data
• Updates to outdated information
• Correction of data across all our systems

How to request:

• Email us at support@mancinagross.com
• Include "Data Correction Request" in the subject line
• Specify what information is incorrect
• Provide the correct information
• Include supporting documentation if necessary

Response time: We will make corrections within one month and notify relevant third parties.

5. Right to Erasure (Article 17)

You have the right to request deletion of your personal data in certain circumstances.

When you can request deletion:

• The data is no longer necessary for the original purpose
• You withdraw consent and no other legal basis exists
• You object to processing and no overriding interests exist
• The data has been unlawfully processed
• Deletion is required for legal compliance

When we may not delete data:

• For freedom of expression and information
• For compliance with legal obligations
• For public health or scientific research
• For establishing, exercising, or defending legal claims

How to request:

• Email us at support@mancinagross.com
• Include "Data Deletion Request" in the subject line
• Specify what data you want deleted
• Provide reasons for the deletion request

6. Right to Restrict Processing (Article 18)

You can request that we limit how we process your personal data in certain situations.

When you can request restriction:

• You contest the accuracy of the data
• Processing is unlawful but you don't want deletion
• We no longer need the data but you need it for legal claims
• You object to processing while we verify our interests

What restriction means:

• We can store the data but not use it
• Processing only with your consent
• Processing for legal claims or protection of others
• Processing for important public interests

How to request:

• Email us at support@mancinagross.com
• Include "Processing Restriction Request" in the subject line
• Explain why you want processing restricted
• Specify which data processing to restrict

7. Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used format and transfer it to another controller.

When this applies:

• Processing is based on consent or contract
• Processing is carried out by automated means
• Data was provided by you directly

What you can request:

• Your data in a machine-readable format (JSON, CSV, XML)
• Direct transfer to another service provider
• Technical assistance with data export

How to request:

• Email us at support@mancinagross.com
• Include "Data Portability Request" in the subject line
• Specify what data you want to export
• Indicate preferred format or destination service

8. Right to Object (Article 21)

You have the right to object to certain types of processing of your personal data.

Processing you can object to:

• Processing for legitimate interests
• Processing for public tasks
• Direct marketing (including profiling)
• Processing for scientific or historical research

Direct marketing objection:

• You can object at any time
• We must stop immediately
• No exceptions apply
• Includes email marketing and targeted advertising

How to object:

• Email us at support@mancinagross.com
• Include "Processing Objection" in the subject line
• Specify what processing you object to
• Provide reasons for your objection
• Use unsubscribe links in marketing emails

9. Rights Related to Automated Decision-Making (Article 22)

You have rights regarding automated decision-making, including profiling, that produces legal or significant effects.

Your rights include:

• Not to be subject to purely automated decisions
• Request human intervention in automated decisions
• Express your point of view
• Contest automated decisions

Note: Celtic Treasures does not currently use automated decision-making that produces legal or significant effects on individuals.

10. How to Exercise Your Rights

Contact Methods:

Information to Include:

• Full name and contact information
• Proof of identity (copy of ID or passport)
• Clear description of your request
• Specific data or processing you're referring to
• Preferred method for our response

Response Times:

• Standard response: Within one month
• Complex requests: Up to three months (with explanation)
• Urgent requests: We'll prioritize where possible
• Acknowledgment: Within 72 hours of receipt

11. Withdrawing Consent

Where processing is based on consent, you can withdraw it at any time.

How to withdraw consent:

• Email support@mancinagross.com with "Withdraw Consent" in subject
• Use unsubscribe links in marketing emails
• Contact us by phone during business hours
• Update preferences in your account settings

Types of consent you can withdraw:

• Marketing communications
• Non-essential cookies
• Data sharing for marketing purposes
• Optional data processing activities

Important: Withdrawing consent does not affect the lawfulness of processing before withdrawal.

12. Cookie Management

You can manage your cookie preferences at any time.

Cookie categories:

• Essential cookies: Required for website functionality (cannot be disabled)
• Analytics cookies: Help us understand website usage
• Marketing cookies: Used for targeted advertising
• Preference cookies: Remember your settings and choices

How to manage cookies:

• Use our cookie consent tool on the website
• Adjust browser settings to block or delete cookies
• Email us to opt out of specific cookie types
• Use browser privacy/incognito mode

13. Complaints and Supervisory Authority

If you're not satisfied with how we handle your request or believe we've violated GDPR, you have the right to lodge a complaint.

Irish Data Protection Commission:

Before filing a complaint:

• Contact us directly to resolve the issue
• Allow reasonable time for our response
• Document all communications
• Clearly explain your concerns

14. Fees and Charges

Generally, exercising your GDPR rights is free of charge.

When we may charge a fee:

• Requests are manifestly unfounded or excessive
• Multiple identical requests from the same person
• Requests require disproportionate effort

Fee structure:

• Administrative fee based on actual costs
• Maximum fee as allowed by law
• Clear explanation of charges
• Option to withdraw request if fees apply

15. Identity Verification

To protect your personal data, we may need to verify your identity before processing requests.

Acceptable forms of ID:

• Government-issued photo ID (passport, driver's license)
• National identity card
• Utility bill with matching address (for address verification)

Verification process:

• Secure handling of identification documents
• Verification only for the specific request
• Secure deletion of ID copies after verification
• Alternative verification methods if needed

16. Updates to This Information

We may update this GDPR rights information to reflect changes in law or our practices. Updates will be posted on this page with a new effective date.

Significant changes will be communicated via email to users who have provided contact information.