GDPR & Data Protection
Last Updated: 28 August 2025
1. Introduction
gaablogs.ie ("we", "us", "our") is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This document explains how we collect, use, store, and protect your personal data.
2. Data Controller Information
- Data Controller: Think X Intelligent Systems
- Address: Longford, Ireland
- Email: privacy@gaablogs.ie
- Website: www.gaablogs.ie
3. Personal Data We Collect
3.1 Account Information
- Name and email address (required for account creation)
- Display name and profile information
- Profile picture/avatar (optional)
- Bio and website links (optional)
3.2 Content Data
- Posts, comments, and contributions you submit
- Media files you upload (images, audio files)
- Tags and categories you use
- Interactions with other users' content
3.3 Technical Data
- IP address and browser information
- Device type and operating system
- Pages visited and time spent on site
- Referral sources and search terms
3.4 Cookies and Tracking
- Session cookies for authentication
- Analytics cookies (Google Analytics)
- Preference and functionality cookies
- Marketing and advertising cookies (with consent)
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
| Purpose | Legal Basis | Retention Period |
|---|---|---|
| Account creation and management | Contract performance | Until account deletion |
| Content publishing and interaction | Legitimate interest | Until content deletion |
| Website analytics and improvement | Legitimate interest | 26 months (Google Analytics) |
| Marketing communications | Consent | Until consent withdrawal |
| Legal compliance | Legal obligation | As required by law |
5. How We Use Your Data
- Provide and maintain our GAA community platform
- Enable content creation, sharing, and interaction
- Personalize your experience and show relevant content
- Send notifications about activity and updates
- Analyze usage patterns to improve our services
- Ensure platform security and prevent abuse
- Comply with legal obligations
6. Data Sharing and Third Parties
We may share your data with:
6.1 Service Providers
- Hosting and cloud storage providers
- Email service providers
- Analytics services (Google Analytics)
- Payment processors (if applicable)
6.2 Legal Requirements
- Law enforcement agencies (when legally required)
- Regulatory authorities
- Legal proceedings and court orders
7. Your GDPR Rights
Under GDPR, you have the following rights:
Right of Access
Request a copy of your personal data and information about how we process it.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restriction
Request limitation of processing in certain circumstances.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests.
8. Exercising Your Rights
To exercise your GDPR rights, you can:
- Use the privacy settings in your account dashboard
- Contact us at privacy@gaablogs.ie
- Submit a request through our data request form
- Contact your local data protection authority
9. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Staff training on data protection
- Incident response procedures
10. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure such transfers comply with GDPR requirements through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
11. Data Retention
We retain your personal data only for as long as necessary:
- Account data: Until account deletion or 2 years of inactivity
- Content: Until deletion by user or account closure
- Analytics data: 26 months (Google Analytics)
- Logs: 12 months for security purposes
- Legal records: As required by applicable law
12. Cookies and Tracking
We use cookies for the following purposes:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Essential | Authentication, security, basic functionality | No |
| Analytics | Website usage analysis and improvement | Yes |
| Marketing | Personalized advertising and marketing | Yes |
13. Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.
14. Changes to This Policy
We may update this GDPR policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.
15. Contact Information
For any questions about this GDPR policy or your data rights, please contact us:
- Email: privacy@gaablogs.ie
- Postal Address: Think X Intelligent Systems, Longford, Ireland
- Data Protection Officer: privacy@gaablogs.ie
Data Protection Authority
You also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.
Irish Data Protection Commission:
Website: www.dataprotection.ie
Email: info@dataprotection.ie