Privacy & Cookies Policy

1. Introduction

Triple Edge Energy is committed to protecting the privacy and security of personal data. This Data Protection Policy outlines how we handle personal data to ensure compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR):

General Data Protection Regulation (GDPR): This EU-wide regulation, effective since May 25, 2018, governs the processing of personal data and ensures the protection of individuals' privacy rights across the European Union.
Data Protection Act 2018: This national legislation complements the GDPR by addressing specific provisions allowed under the regulation, transposing the Law Enforcement Directive into Irish law, and establishing the Data Protection Commission as Ireland's supervisory authority.
ePrivacy Regulations 2011: These regulations implement the EU's ePrivacy Directive, focusing on the confidentiality of electronic communications, including rules on cookies and unsolicited marketing communications.

2. Principles of Data Protection Laws

Triple Edge Energy follows these core principles to ensure the lawful and fair processing of personal data:

Lawfulness, Fairness, and Transparency: Personal data will be processed lawfully, fairly, and in a transparent manner.
Purpose Limitation: Data will be collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
Data Minimization: The data collected will be adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
Accuracy: Personal data will be accurate and, where necessary, kept up to date.
Storage Limitation: Data will be kept in a form which permits identification for no longer than necessary.
Integrity and Confidentiality: Data will be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Accountability: We will take responsibility for, and be able to demonstrate, compliance with these principles.

3. Data Subject Rights

Individuals have the following rights regarding their personal data:

Right to Access: Individuals can request access to their personal data.
Right to Rectification: Individuals can request the correction of inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): Under certain conditions, individuals can request the deletion of their personal data.
Right to Restrict Processing: Individuals can request the limitation of processing in certain situations.
Right to Data Portability: Individuals can request to receive their data in a structured, commonly used, and machine-readable format.
Right to Object: Individuals can object to the processing of their personal data based on legitimate interests or direct marketing.
Rights in Relation to Automated Decision-Making and Profiling: Individuals have the right not to be subject to decisions based solely on automated processing, including profiling.

4. Transfers to Third Parties

When personal data is transferred to third parties, we ensure:

Due Diligence: We assess the third party's compliance with data protection laws.
Data Processing Agreements: Contracts are established to specify the responsibilities of each party concerning data protection.
International Transfers: When data is transferred outside the European Economic Area (EEA), appropriate safeguards such as Standard Contractual Clauses or approved certifications are implemented to ensure data security. This is a minimum requirement when utilising cloud based managed solution providers.

5. Breaches of Data Protection Laws

In the event of a data breach, Triple Edge Energy will:

Identify and Assess the Breach: Determine the nature, cause, and impact of the breach.
Contain the Breach: Take immediate steps to minimize harm and prevent further breaches.
Notify Authorities: If the breach is likely to result in a risk to individuals' rights and freedoms, it will be reported to the relevant supervisory authority within 72 hours. As the Business operates from Ireland, this will be the Irish Data Protection Commission.
Inform Affected Individuals: When the breach poses a high risk, affected individuals will be notified without undue delay.
Review and Update Practices: Post-breach, we will review our policies and procedures to prevent future incidents.

6. Governance

Triple Edge Energy has established a governance framework to ensure compliance with data protection laws:

Data Protection Officer (DPO): A DPO is appointed to monitor compliance, advise on data protection obligations, and act as a point of contact with the supervisory authority.
Data Protection Impact Assessments (DPIAs): Conducted for high-risk data processing activities to identify and mitigate risks.
Training and Awareness: Regular training for staff to ensure understanding of data protection responsibilities.
Policy Review: This policy will be reviewed as necessary to remain compliant with changes in legislation.

7. Cookies Policy

How we use cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual.
The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs.
We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not.
A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies.
Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website.
Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement.
You should exercise caution and look at the privacy statement applicable to the website in question.

8. Conclusion

Triple Edge Energy is dedicated to maintaining the privacy and security of personal data. All staff are required to comply with this policy and attend training where appropriate.