Data Controller
Deskline Studio, trading as a workspace planning practice, is the data controller responsible for your personal data.
Registered address: 42 Pearse Street, Dublin 2, D02 NY60, Ireland
Email: [email protected]
Phone: +353 1 677 2941
For data protection enquiries, contact us at the email address above with the subject line "Data Protection".
Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity data: name, job title, company name
- Contact data: email address, telephone number, business address
- Technical data: IP address, browser type, device information, pages visited
- Communication data: messages sent through contact forms, email correspondence, consultation notes
- Project data: floor plans, headcount information, and occupancy data provided for layout planning
- Financial data: billing address and payment records for invoiced services
Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process personal data on the following legal bases:
- Contract (Article 6(1)(b)): Processing necessary to perform workspace planning services you have requested, including quotations, site surveys, and delivery of layout drawings.
- Legitimate interests (Article 6(1)(f)): Responding to enquiries, improving our services, maintaining business records, and ensuring network security. We balance these interests against your rights and freedoms.
- Consent (Article 6(1)(a)): Where you opt in to marketing communications or non-essential cookies. You may withdraw consent at any time.
- Legal obligation (Article 6(1)(c)): Retaining financial records as required by Irish tax and company law.
Cookies
Our website uses cookies and similar technologies. Essential cookies are required for basic site functionality. Analytics cookies, where used, help us understand how visitors navigate our pages.
You can manage cookie preferences through your browser settings. For full details, see our Cookie Policy.
How We Use Your Data
- To provide workspace planning services including consultations, surveys, and deliverables
- To respond to contact form submissions and proposal requests
- To issue invoices and maintain accounts
- To send service-related communications about active projects
- To improve our website and understand visitor behaviour through aggregated analytics
- To comply with legal and regulatory requirements
Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy:
- Enquiry data: 24 months from last contact if no contract is formed
- Client project data: 7 years from project completion, aligned with Irish limitation periods for professional services records
- Financial records: 7 years as required by Revenue Commissioners guidelines
- Marketing consent records: Until consent is withdrawn, plus 12 months for audit purposes
- Website analytics: 26 months in aggregated form where analytics tools are used
- Cookie consent logs: 12 months
After retention periods expire, data is securely deleted or anonymised.
Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access: Request a copy of personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion where there is no compelling reason for continued processing
- Right to restrict processing: Request that we limit how we use your data in certain circumstances
- Right to data portability: Receive your data in a structured, machine-readable format where processing is based on consent or contract
- Right to object: Object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: Where processing is consent-based, withdraw consent without affecting prior lawful processing
To exercise any of these rights, email [email protected]. We respond within one month, extendable by two further months for complex requests with notice.
Complaints
If you believe we have not handled your personal data correctly, contact us first so we can address your concern. You also have the right to lodge a complaint with the Data Protection Commission (DPC), the supervisory authority in Ireland:
Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie
Phone: +353 1 765 0100
International Transfers
We primarily store and process data within the European Economic Area (EEA). Where we use service providers outside the EEA — for example, cloud storage or email platforms — we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Transfers to countries with an adequacy decision from the European Commission
- Binding corporate rules where applicable
Details of specific transfers and safeguards are available on request.
Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including:
- Encrypted connections (TLS/HTTPS) for data transmitted via our website and email
- Access controls limiting staff access to client data on a need-to-know basis
- Secure storage of project files with regular backups
- Password policies and device security for staff handling client information
- Confidentiality obligations in contracts with employees and subcontractors
- Prompt notification to the DPC and affected individuals where a personal data breach poses a risk to rights and freedoms, within 72 hours where feasible
No method of transmission over the internet is completely secure. We cannot guarantee absolute security but review our measures regularly.
Third-Party Processors
We may share data with trusted processors who assist in delivering our services — for example, accounting software providers, cloud storage, and IT support. All processors are bound by written agreements requiring GDPR-compliant handling of personal data.
Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates the most recent revision. Material changes will be communicated via our website or direct notice where appropriate.