Privacy Notice
Last updated:
1. Who we are
This website is operated by ACCER INFORMATION TECHNOLOGY LIMITED, trading as ACCER IT, a company registered in Ireland (company number 804260), registered office: 6 Fern Road, Sandyford, Dublin, D18 FP98, Ireland. We are the data controller for the personal data described here.
Contact us about privacy at support@accerit.ie.
2. What we collect, why, and our legal basis
| Information | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|
| Project brief form: name, email, company, website, project type, timeline, your message, and the time of submission | Responding to your enquiry, discussing requirements, preparing quotes, providing requested services and maintaining relevant business records | Steps at your request before entering into a contract or performing a contract with you (6(1)(b)); otherwise our legitimate interest in responding to business enquiries (6(1)(f)) |
| Email correspondence: sender and recipient details, subject, message content, attachments and related email metadata | Responding to enquiries, providing requested information or services, maintaining business correspondence and handling contractual matters | Steps at your request before entering into a contract or performing a contract with you (6(1)(b)); otherwise our legitimate interest in managing business correspondence (6(1)(f)) |
| Email backups: copies of business emails, attachments and related metadata held on servers under our control | Disaster recovery, business continuity and keeping necessary business records | Legitimate interests (6(1)(f)) in protecting business correspondence and recovering from data loss; legal obligation (6(1)(c)) where records must be retained by law |
| Website server and security logs: IP address, request time, page requested and user agent | Keeping the website secure, preventing spam and abuse, fixing faults | Legitimate interests (6(1)(f)) in a secure, working website |
| DNS-query information handled by our DNS provider, such as the requested domain name and technical details of the querying DNS resolver | Resolving our domain name so visitors can reach the website; operating and securing the DNS service | Legitimate interests (6(1)(f)) in making the website available and reliable |
| Anonymous visit statistics (if enabled): page views and button clicks, without cookies and without identifying you across sites | Understanding how the site is used so we can improve it | Legitimate interests (6(1)(f)) |
| Records we are required to keep | Legal, accounting and tax obligations if we later work together | Legal obligation (6(1)(c)) |
The form asks only for what we need to reply. Please do not send passwords, credentials, API keys or sensitive personal information. We do not use your enquiry for marketing emails or newsletters.
3. Who receives your data
The following service providers and infrastructure handle personal data for the purposes described in section 2:
| Provider or infrastructure | Purpose | Data involved |
|---|---|---|
| Inbox.eu (SIA INBOKSS, Latvia) | Hosting our business mailboxes; receiving, sending and storing business email | Sender and recipient details, message content, attachments and email metadata |
| Brevo | Delivering transactional and system emails through SMTP or API, including contact-form notifications and any enabled confirmation emails | Email addresses, enquiry details and other message content included in those emails, and delivery metadata |
| Cloudflare | Authoritative DNS for our domain | DNS-query information, such as the requested domain name and technical details of the querying DNS resolver |
| Our own infrastructure | Encrypted email backups for disaster recovery, business continuity and necessary business record keeping | Copies of business emails, attachments and related metadata |
| Website hosting provider | Running our website server in Germany | Website requests, submitted enquiry details and technical or security information |
Our website's DNS records are configured as DNS-only, with proxying disabled. Website requests and contact-form submissions connect directly to our hosting server. Cloudflare's DNS service does not receive the content of those requests or submissions.
Access to our business correspondence and backups is restricted to authorised personnel. IT or professional advisers may also receive relevant data where necessary and under confidentiality obligations.
Inbox.eu describes its data protection arrangements in its Privacy Policy and Terms of Service. Cloudflare describes its handling of DNS data in its Privacy Policy.
We do not sell personal data.
4. International transfers
Our website is hosted in Germany, within the European Economic Area (EEA). Inbox.eu states that its email data is hosted on its own servers in Latvia, within the EU. Brevo states that its database processing and storage servers are in the EU, in France, Germany and Belgium; see its data storage information.
These hosting arrangements do not mean that every service operation or access takes place within the EEA. Cloudflare operates a global DNS service and may process DNS-related data outside the EEA. DNS-only mode does not guarantee that all such processing takes place within the EEA.
Where personal data is transferred outside the EEA, we rely on an applicable adequacy decision, where it covers the recipient and transfer, or European Commission-approved Standard Contractual Clauses, with additional safeguards where required. Cloudflare sets out its transfer arrangements in its Data Processing Addendum. You can contact us at support@accerit.ie for information about the safeguards relevant to your data, including how to obtain a copy where applicable.
5. How long we keep it
We retain email correspondence and associated backups only for as long as reasonably necessary for the relevant business purpose, legal obligations, resolving disputes and business continuity. Retention depends on the type of record, our last contact, any ongoing project or contractual relationship, and applicable legal requirements.
- Enquiries that do not lead to a project: normally up to 12 months after our last contact. A longer period is used only where necessary to resolve a dispute or comply with a legal obligation.
- Client and contractual correspondence: for the duration of the relationship and afterwards for the period needed for legal, tax and accounting obligations or establishing, exercising or defending legal claims.
- Website server logs: a few days to weeks, unless needed to investigate abuse.
- Email backups follow the same retention criteria as the underlying correspondence. Deleting an email from the live mailbox does not necessarily immediately remove all backup copies. Copies that are no longer needed are deleted or overwritten through backup maintenance; backups are not kept indefinitely.
Backups are access-restricted and used for recovery and necessary record keeping. If a backup is restored, applicable deletion requirements are reapplied before restored correspondence returns to routine use. Service providers may retain limited delivery, security or backup records under their applicable policies and legal obligations.
6. Cookies
This website does not use cookies or similar technologies for analytics or advertising. See our Cookie Policy.
7. Your rights
You have the right to access your personal data, have it corrected or erased, restrict or object to its processing, and receive it in a portable format, where these rights apply. To exercise them, email support@accerit.ie. We will respond within one month.
You also have the right to complain to the Irish Data Protection Commission: www.dataprotection.ie, 6 Pembroke Row, Dublin 2, D02 X963, Ireland.
8. Changes
We will update this notice when our practices change. The date at the top shows when it was last revised.