Last updated: July 21, 2026
summit-space is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.
summit-space acts as the data controller for personal information collected through this website and our consulting services. We are responsible for ensuring your data is processed lawfully, fairly, and transparently.
We process personal data under the following legal bases:
Under GDPR, you have the following rights regarding your personal data:
You can request confirmation of whether we process your personal data and obtain a copy of that data.
You can request correction of inaccurate personal data we hold about you.
You can request deletion of your personal data in certain circumstances, such as when data is no longer necessary for the purposes collected or you withdraw consent.
You can request that we limit how we use your personal data in specific situations.
You can request your personal data in a structured, commonly used format for transfer to another service provider.
You can object to processing based on legitimate interests or direct marketing.
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, contact us using the information provided on our contact page. We will respond to requests within one month, or inform you if we require additional time.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods depend on the nature of the data and the purpose of processing.
We process data primarily within the European Economic Area. If data is transferred outside the EEA, we ensure appropriate safeguards are in place as required by GDPR.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk to your rights, we will also notify you directly.
You have the right to lodge a complaint with the Data Protection Commission, Ireland's supervisory authority for data protection:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
For questions or concerns about how we process your personal data, or to exercise your GDPR rights, contact us through the information provided on our contact page.