Loading…
How Solar Cavan collects, uses, and protects your personal information.
Last updated: 1 January 2025
Solar Cavan ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal information when you use our website at renewablecavan.ie, when you contact us by telephone or email, when we carry out a site survey at your property, and when we provide solar panel installation and related services to you.
For the purposes of General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018, we are the data controller of your personal information. Our registration details are as follows:
If you have any questions about this Privacy Policy, please contact our Data Protection Officer at info@renewablecavan.ie or by writing to the registered address above.
We collect and process the following categories of personal information in connection with our services:
We process your personal data only when we have a lawful basis to do so. Under General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018, the lawful bases we rely on are set out below. Each processing activity is listed alongside the specific legal basis on which it is based, as required by GDPR Article 6:
| Purpose | Legal Basis | GDPR Article 6 Basis |
|---|---|---|
| Providing solar installation quotes and services | Contract performance — we need your data to perform the contract you have entered into with us, or to take steps at your request before entering into a contract. | Article 6(1)(b) |
| Processing grant applications on your behalf | Contract performance and legitimate interest — we process grant data to fulfil our contractual obligations and to secure available financial incentives for you. | Article 6(1)(b) & (f) |
| Communicating with you about your installation | Contract performance and legitimate interest — we contact you regarding scheduling, progress updates, and aftercare support. | Article 6(1)(b) & (f) |
| Processing payments and invoices | Contract performance and legal obligation — payment processing is necessary to fulfil our contract and comply with tax and accounting regulations. | Article 6(1)(b) & (c) |
| Responding to enquiries and providing customer support | Legitimate interest — responding to pre-contractual enquiries is in our legitimate business interest and in your interest as a potential customer. | Article 6(1)(f) |
| Sending marketing communications | Consent — we only send marketing emails or messages where you have explicitly opted in. You can withdraw consent at any time. | Article 6(1)(a) |
| Improving our website and services | Legitimate interest — anonymised analytics data helps us understand how our website is used so we can improve it. | Article 6(1)(f) |
| Complying with legal obligations | Legal obligation — we may process data to comply with health and safety regulations, tax law, consumer protection law, and other applicable legal requirements. | Article 6(1)(c) |
| Establishing, exercising, or defending legal claims | Legitimate interest — we may process data where necessary for the establishment, exercise, or defence of legal claims. | Article 6(1)(f) |
We do not sell your personal data to any third party. We may share your information with the following categories of recipients only where necessary to provide our services or where required by law:
All third-party service providers are bound by Data Processing Agreements that require them to process your data only in accordance with our instructions and to maintain appropriate security measures.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Our specific retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Quotation enquiries and lead data | 12 months from last contact | Legitimate interest in maintaining prospective customer records |
| Customer contracts and correspondence | 7 years from installation completion | Compliance with tax legislation, warranty obligations, and limitation periods |
| Grant application records | 7 years from grant approval | SEAI retention requirements and audit compliance |
| Payment and invoice records | 7 years from transaction date | Statutory requirements under tax and companies legislation |
| Warranty and service records | Duration of warranty period + 3 years | To honour warranty obligations and support guarantee claims |
| Website analytics data | 26 months | Industry standard for website analytics (Google Analytics default) |
| CCTV footage (if applicable) | 30 days | Security purposes, in accordance with data protection guidance |
| Marketing consent records | Until consent is withdrawn | To demonstrate lawful consent and honour opt-out requests |
When your data is no longer required, it will be securely deleted or anonymised in accordance with our data retention procedures.
Under General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018, you have the following rights in relation to your personal data. We are committed to facilitating the exercise of these rights and will respond to any request within one month of receipt.
To exercise any of these rights, please contact us at info@renewablecavan.ie or write to us at our registered address. We may request proof of identity before processing your request. We will respond to your request within one month. This period may be extended by a further two months for complex requests, in which case we will notify you within the first month.
Our website uses cookies and similar tracking technologies to provide and improve our services. When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or customise the cookies we use.
We use the following categories of cookies:
You can manage your cookie preferences at any time through the cookie consent banner, by clearing cookies in your browser settings, or by visiting www.allaboutcookies.org for more information. Please note that disabling certain cookies may affect the functionality of our website.
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. Our security measures include:
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission (DPC) within 72 hours of becoming aware of the breach, as required by GDPR Article 33. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
Our data breach response procedure includes: (a) containing and assessing the breach, (b) identifying affected individuals and data, (c) notifying the supervisory authority where required, (d) notifying affected individuals where required, and (e) implementing measures to prevent recurrence.
As we are based in Ireland, your data is processed primarily within the European Economic Area (EEA). In some cases, we may transfer data to service providers located outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data.
Data processed by Google Analytics may be transferred to the United States. Google provides adequate safeguards through its participation in the EU-US Data Privacy Framework. For more information, see Google's privacy documentation.
We engage the following categories of third-party data processors to assist in providing our services. Each processor is bound by a written Data Processing Agreement that sets out their obligations:
Where our data processing is likely to result in a high risk to your rights and freedoms, we carry out a Data Protection Impact Assessment (DPIA) in accordance with GDPR Article 35. DPIAs are conducted for new processing activities that involve systematic monitoring, large-scale processing of special category data, or new technologies.
We maintain a DPIA register and these assessments are reviewed annually or whenever there is a material change to the processing activity. If you would like further information about a specific DPIA, please contact our Data Protection Officer.
You have the right to lodge a complaint with the supervisory authority if you believe that our processing of your personal data infringes General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018. We would encourage you to contact us first so that we can attempt to resolve your concern, but you are not required to do so.
Data Protection Commission (DPC)
Address: 21 Fitzwilliam Square South, Dublin 2, D02 RK28, Ireland
Website: https://www.dataprotection.ie
Email: info@dataprotection.ie
Phone: +353 21 765 5300
We may update this Privacy Policy from time to time to reflect changes in our practices, changes in applicable law, or for other operational reasons. The updated version will be published on this page with a revised "last updated" date. We encourage you to review this page periodically to stay informed about how we protect your data.
Where we make material changes to this Privacy Policy that affect how we use your personal data, we will notify you by email (where we have your email address) or by displaying a prominent notice on our website.
If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact us:
We aim to acknowledge all data protection enquiries within 5 working days and to provide a substantive response within one month, as required by law.