GDPR Compliance

Our commitment

Prestige Credit is committed to full compliance with Regulation (EU) 2016/679 — the General Data Protection Regulation ("GDPR") — and with the Irish Data Protection Acts 1988 to 2018.

This document summarises the technical and organisational measures we maintain to protect your personal data, the rights you can exercise as a data subject, and the contact details of our Data Protection Officer.

Our measures

We implement the following measures to ensure ongoing compliance with the GDPR:

• Data minimisation: we collect only the personal data strictly necessary for the relevant purpose.
• Encryption: 256-bit SSL in transit, AES-256 at rest, on EU-resident infrastructure only.
• Access controls: ISO 27001-aligned, role-based, with multi-factor authentication mandatory for all internal staff.
• Audit logging: every access to personal data is logged and retained for review by our DPO.
• Annual training: all employees with data access complete certified GDPR training annually.
• External audit: our compliance posture is verified annually by a Big Four firm.
• Breach response: we operate a 24-hour notification protocol to the Irish Data Protection Commission and to affected data subjects.

Your eight rights

The GDPR confers eight rights on you as a data subject. Prestige Credit provides a clear procedure to exercise each, free of charge.

Exercising a right

To exercise any of the eight rights above, send a written request to our Data Protection Officer at dpo@prestigecredit.eu. We will respond within thirty days, free of charge for the first request in any twelve-month period.

Where the request is manifestly unfounded or excessive, we may refuse to act on it or charge a reasonable fee, in accordance with Article 12(5) of the GDPR.

Right to complain

If you believe that we have processed your personal data unlawfully, you have the right to lodge a complaint with the Irish Data Protection Commission, our supervisory authority:

• Web: dataprotection.ie
• Email: info@dataprotection.ie
• Postal: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland