GDPR

Last Updated: October 2025

Our Commitment to Data Protection

Function First Rehab is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. This statement outlines how we comply with data protection legislation.

Data Controller

Function First Rehab is the data controller for the personal information we collect and process.

Business Name: Function First Rehab
Trading As: Function First Rehab
Address: Longford Arms Hotel Leisure Centre, Main St, Townparks, Longford, N39 X4H6, Ireland
Email: [email protected]
Phone: 089 449 1706

Your Rights Under GDPR

As a data subject, you have the following rights:

1. Right to Access You can request a copy of the personal data we hold about you.

2. Right to Rectification You can ask us to correct inaccurate or incomplete personal data.

3. Right to Erasure (Right to be Forgotten) You can request that we delete your personal data in certain circumstances.

4. Right to Restrict Processing You can ask us to limit how we use your personal data.

5. Right to Data Portability You can request your data in a structured, commonly used format to transfer to another provider.

6. Right to Object You can object to processing of your personal data for certain purposes, including direct marketing.

7. Rights Related to Automated Decision Making You have the right not to be subject to decisions based solely on automated processing.

8. Right to Withdraw Consent Where we rely on consent to process your data, you can withdraw this at any time.

How to Exercise Your Rights

To exercise any of these rights, please contact us:

Email: [email protected]
Phone: 089 449 1706
Post: Function First Rehab, Longford Arms Hotel Leisure Centre, Main St, Townparks, Longford, N39 X4H6, Ireland

We will respond to your request within one month. In complex cases, this may be extended by two months, and we will inform you of any delay.

Lawful Basis for Processing

We process your personal data based on the following lawful grounds:

Consent: You have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications).

Contract: Processing is necessary for a contract we have with you (e.g., providing therapy services).

Legal Obligation: Processing is necessary to comply with the law (e.g., health and safety records, tax requirements).

Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving our services, preventing fraud).

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Secure servers with SSL encryption
  • Access controls and authentication
  • Regular security assessments
  • Staff training on data protection
  • Secure backup systems
  • Confidentiality agreements with third parties

Data Breaches

In the event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify the Data Protection Commission within 72 hours
  • Inform affected individuals without undue delay
  • Take immediate steps to mitigate the breach
  • Document the breach and our response

International Data Transfers

We primarily process data within Ireland and the EU. If we transfer data outside the EU, we ensure appropriate safeguards are in place through:

  • Adequacy decisions
  • Standard contractual clauses
  • Binding corporate rules

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Client Records: 7 years (as required by healthcare regulations)
  • Marketing Consent: Until withdrawn or 3 years of inactivity
  • Website Analytics: 24 months
  • Financial Records: 6 years (as required by Revenue)

Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland

Phone: +353 (0)761 104 800
Email: [email protected]
Website: www.dataprotection.ie