Who are we?

We are Dublet Ltd T/A Herbert & Lansdowne Estate Agents, 13 Merrion Row, Dublin 2, D02 AP80

What do we do?

We have been appointed by the Landlord C/o Dublet Ltd T/A Herbert & Lansdowne Estate Agents, 13 Merrion Row, Dublin 2, D02 AP80, to let / manage the property subject to a Tenancy Agreement.

What is our role under the General Data Protection Regulation (GDPR)?

We consider ourselves to be the Data Processor and Data Controller acting on behalf of the Landlord who is also the Data Controller and a Data Subject. Both the Data Controller and the Data Processor are subject to the Office of the Data Protection Commissioner, the Supervisory Authority.

Where did we get your data?

We received your data from you.

What is the purpose of processing your data?

You are party to a Tenancy to which you the Data Subject are bound. We have been appointed by the

Landlord to arrange the Tenancy and / or administer the covenants of the Tenancy.

What is the lawful basis for this processing?

• Processing is necessary for the performance of a contract to which the Data Subject is party [ Article 6 GDPR (1)b ].
• Processing is necessary for compliance with a legal obligation to which the Data Controller is subject [ Article 6 GDPR (1)c ].

Namely:

• The Residential Tenancies Acts 2004 to 2016
• Criminal Justice (Money Laundering and Terrorist Financing) Act 2010
• Property Services (Regulation) Act 2011 (Client Moneys) Regulations 2012
• Property Services (Regulation) Act 2011

What type of data do we keep?

Name, address, phone, email, bank details, PPS numbers, references, ID, other.

Where is this data stored?

This data is stored in a database called Letman which is operated on Amazon Web Services located in Ireland. Data stored and transferred is encrypted. Data is also kept in our confidential office files and confidential emails which are only accessed on a strict basis.

Access is only granted to administrators associated with our office.

Who is this data shared with?

This data is shared only with similar Data Processors for the purpose described above. The categories of Data Processors are:

• Database Management Systems
• Maintenance Contractors
• Property Services Providers
• Auditors
• Emergency/Utility Service providers

How long will the data be stored?

Your data will be maintained by us for as long as the contract between the Data Controller and us (the Data Processor) exists or for as long as required by legislation.

What if your tenancy ends?

There is still an obligation on the Data Processor & Data Controller to main adequate accounting records. See above.

What are your rights?

• You have a right to be informed.
• You may request a copy of your data stored.
• You may request correction to any erroneous data.
• You may request deletion of data, if not in violation of statutory or contractual requirements.
• You may lodge a complaint to the controller or object to processing.
• You may lodge a complaint to the Supervisory Authority.
• You may withdraw consent if processing originally required consent.

What happens in the event of a Data Breach?

In the case of a data breach, the Data Controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the Supervisory Authority and Data Subject, if the personal data breach is likely to result in a risk to the rights and freedoms of natural persons.

Where can you find more information?

A copy of your data and this statement is available at our registered office. 

Further information is available here:

• GDPR Act 2016 (pdf): https://www.blockman.ie/downloads/gdpr_act_2016.pdf
• GDPR Act Easy Read: https://gdpr-info.eu
• Official GDPR Website: https://www.eugdpr.org