1. Introduction
Realtasoft ("we", "our", or "us"), a company incorporated in Ireland (CRO No. 526391) and operating at realtasoft.ie, is the data controller in respect of the personal data we collect through this Website and our Services.
This Privacy Policy applies to all personal data we process about visitors to our website, prospective and current clients, business contacts, and users of our Services. It should be read together with our Terms and Conditions and, where applicable, any separate data processing agreement or client contract.
If you have any questions about this Privacy Policy or our data practices, please contact us using the details in Section 14.
2. What Personal Data We Collect
2.1 Identity and Contact Data
We may collect the following categories of personal data:
- Full name, job title, company/organization name;
- Email address, telephone number, and postal address;
- Account login credentials (username/password) where accounts are created.
2.2 Technical and Device Data
- IP address and approximate geolocation (country/region level);
- Browser type and version, operating system, device type;
- Referring URLs, pages visited, time and duration of visits;
- Cookie identifiers and tracking preferences (see Section 9).
2.3 Communications Data
We may collect the following communications data:
- Content of enquiries, support requests, or messages submitted via contact forms or email;
- Records of correspondence with our team.
2.4 Usage and Analytics Data
- Interaction data with the Website (pages viewed, links clicked, session duration);
- Analytics and performance data gathered via third-party tools (see Section 6).
2.5 Financial and Transaction Data
Where payment is processed for our services, we may collect billing details, invoice history, and transaction reference numbers. Full payment card data is processed exclusively by our authorised payment processor and is never stored by Realtasoft Ltd.
2.6 Special Category Data
We do not intentionally collect special category personal data (such as health data, racial or ethnic origin, political opinions, or biometric data). Please refrain from providing such information unless expressly requested.
2.7 Candidate Data Processing
We collect and process candidate data including CVs, employment history, and professional details for recruitment purposes. Such data is shared only with prospective clients or employers with appropriate consent or lawful basis.
3. How We Collect Your Data
We collect personal data through the following means:
- Directly from you - when you complete a contact or enquiry form, register for an account, subscribe to a newsletter or mailing list, request a quote or demonstration, or communicate with us by email or phone;
- Automatically - through cookies, web beacons, pixels, and server logs when you browse the Website (subject to your cookie consent preferences);
- From third parties - including analytics providers (e.g., Google Analytics), social media platforms, advertising networks, and business partners, subject to their respective privacy policies;
- From publicly available sources - including company registries and professional networking platforms, where relevant to a business relationship.
4. Purpose of Data Processing
We process personal data for the following purposes:
- To provide, maintain, and improve our Website and Services;
- To respond to enquiries, support requests, and general communications;
- To enter and perform contracts for the supply of our services;
- To send you relevant marketing and promotional communications (where you have given consent or we have a legitimate interest to do so);
- To process payments and maintain financial records;
- To comply with legal and regulatory obligations, including tax, accounting, and data protection law;
- To protect the security and integrity of our website and and systems;
- To analyze usage trends and improve user experience;
- To manage and administer user accounts;
- To enforce our Terms and Conditions and defend or exercise legal rights.
5. Legal Basis for Processing Under GDPR
Realtasoft Ltd relies on the following lawful bases under Article 6 GDPR for processing your personal data:
CONTRACT (Art. 6(1)(b))
- Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract (e.g., providing requested services, processing orders, managing accounts).
LEGITIMATE INTERESTS (Art. 6(1)(f))
- Where we have a legitimate business interest that is not overridden by your rights - for example, improving our services, preventing fraud, network & information security, & direct marketing to existing business contacts.
LEGAL OBLIGATION (Art. 6(1)(c))
- Where processing is necessary to comply with a legal obligation to which Realtasoft Ltd is subject (e.g., tax laws, regulatory requirements, responding to lawful requests from authorities).
CONSENT (Art. 6(1)(a))
- Where you have given clear and specific consent - for example, for the use of non-essential cookies, subscription to marketing emails, or any other processing activity for which we have explicitly requested consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Where we rely on legitimate interests, you have the right to object to such processing (see Section 8). A Legitimate Interests Assessment (LIA) is maintained internally and available on request. Processing of candidate data is based on consent and legitimate interest in recruitment services.
6. Data Sharing and Third Parties
6.1 Who We Share Data With
We do not sell, rent, or trade your personal data. We may share your data with:
- Service providers and sub-processors acting as data processors on our behalf (e.g., hosting providers, analytics services, email platforms, payment processors, CRM tools);
- Professional advisors, including lawyers, accountants, and auditors, acting as data controllers;
- Irish and EU regulatory authorities, law enforcement, or other public bodies where required by law or to protect our legal rights;
- Prospective acquirers or investors in the context of a business transaction (subject to appropriate confidentiality obligations).
6.2 Third-Party Processors
All third-party processors are subject to written data processing agreements in accordance with Article 28 GDPR. Our current processors include, but are not limited to: Google (Analytics, Google Workspace), Microsoft 365, and other standard cloud infrastructure and productivity providers. Where payroll or payment processing is used, relevant financial processors will also be engaged. A full and current list of sub-processors is available upon written request to info@realtasoft.ie.
6.3 No Onward Sale
We confirm that personal data is never sold, licensed, or otherwise transferred to third parties for their own independent marketing or commercial purposes.
Candidate data may be shared with clients strictly for recruitment and hiring purposes.
7. Data Retention Policy
We retain personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:
CLIENT AND CONTRACT DATA
- Retained for the duration of the contractual relationship and for 7 years thereafter, in compliance with Irish tax and company law requirements.
MARKETING AND CONSENT DATA
- Retained until consent is withdrawn or, in the case of legitimate interest in marketing, until you object, whichever is earlier.
ENQUIRY AND CORRESPONDENCE DATA
- Retained for up to 3 years from the date of last contact, unless a contract arises from the enquiry.
WEBSITE ANALYTICS DATA
- Anonymized or aggregated analytics data may be retained indefinitely. Cookie-derived data is retained in accordance with our Cookie Policy.
LEGAL AND COMPLIANCE DATA
- Where processing is necessary to comply with a legal obligation, data is retained for the period specified by the relevant law.
At the end of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data disposal procedures.
8. Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights in relation to your personal data:
RIGHT OF ACCESS (Art. 15)
- You have the right to request a copy of the personal data we hold about you and information about how it is processed (a "Subject Access Request" or SAR). We will respond within one calendar month.
RIGHT TO RECTIFICATION (Art. 16)
- You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
RIGHT TO ERASURE (Art. 17)
- You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to legal obligations that may require us to retain certain data.
RIGHT TO RESTRICTION (Art. 18)
- You have the right to request that we restrict the processing of your personal data in certain circumstances - for example, while we verify the accuracy of the data or assess an objection.
RIGHT TO DATA PORTABILITY (Art. 20)
- Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
RIGHT TO OBJECT (Art. 21)
- You have the right to object at any time to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
RIGHTS RELATED TO AUTOMATED DECISION-MAKING (Art. 22)
- You have the right not to be subject to decisions based solely on automated processing - including profiling - where such decisions produce legal or similarly significant effects. Realtasoft does not currently make solely automated decisions that produce legal or similarly significant effects on individuals.
To exercise any of these rights, please submit a request in writing to: info@realtasoft.ie. We will respond within one calendar month. In exceptional cases, this may be extended by a further two months, in which case we will notify you.
You also have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority for data protection matters:
DATA PROTECTION COMMISSION (DPC)
- Website: www.dataprotection.ie
- Address: 21-25 Canal Road, Dublin 6, D06 F6P6, Ireland
- Phone: +353 57 8684800 / +353 (0)761 104 800
9. Cookies and Tracking Technologies
9.1 What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They enable the website to recognize your device on subsequent visits, remember your preferences, and collect analytical data about your browsing behavior.
9.2 Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the Website to function correctly. These cannot be disabled as they are required to deliver the service you have requested. No consent is required for these cookies.
- Performance and Analytics Cookies: Used to gather anonymized information about how visitors use our website (e.g., pages visited, traffic sources). We use Google Analytics for this purpose. These cookies are set only with your consent.
- Functional Cookies: Enable enhanced features and personalization (e.g., remembering your preferences). Set only with your consent.
- Marketing and Targeting Cookies: Used to deliver advertisements relevant to your interests. Set only with your explicit consent. Contact us if you require further details on marketing cookies.
9.3 Cookie Consent
When you first visit our Website, you will be presented with a cookie consent banner. You may accept all cookies, select individual categories, or decline non-essential cookies. You can modify your preferences at any time via our cookie settings tool (available in the Website footer) or by adjusting your browser settings.
Please note that disabling certain cookies may affect the functionality and performance of the Website.
9.4 Third-Party Cookies
Some cookies are placed by third-party service providers, including Google, LinkedIn, Meta. These providers operate under their own privacy policies. We encourage you to review their policies.
10. Data Security Measures
We implement appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our measures include:
- Secure Sockets Layer (SSL) / TLS encryption for all data transmitted via the Website;
- Access controls and authentication requirements for staff accessing personal data;
- Regular security assessments and vulnerability testing;
- Data minimization and pseudonymization practices where feasible;
- Staff training on data protection obligations;
- Incident response procedures including breach of notification protocols compliant with Article 33 GDPR.
While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we will notify you and the DPC of any personal data breach in accordance with our legal obligations.
11. International Data Transfers
Realtasoft Ltd is based in Ireland and primarily processes data within the European Economic Area (EEA). Where we engage service providers or sub-processors based outside the EEA (including, for example, cloud infrastructure providers in the United States), we ensure that any such transfer of personal data is subject to appropriate safeguards, including:
- An adequacy decision issued by the European Commission in respect of the recipient country;
- Standard Contractual Clauses (SCCs) as approved by the European Commission under Article 46(2)(c) GDPR; or
- Other appropriate safeguards as required under Chapter V of the GDPR.
You may request further information regarding the specific safeguards applicable to international transfers of your data by contacting us at the details in Section 14.
12. Children's Privacy
Our Website and Services are not directed at, and are not intended to be used by, children under the age of 16. We do not knowingly collect personal data from children under 16 years of age without verifiable parental or guardian consent.
If you are a parent or guardian and believe that a child under 16 has provided us with personal data without your consent, please contact us immediately at info@realtasoft.ie so that we may take steps to delete such data.
13. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the Services we provide. The revised Policy will be published on this page with an updated "Effective Date."
Where changes are material, we will notify you by a prominent notice on our website or, where we hold your contact details, by email. We encourage you to review this Policy periodically to stay informed about how we are protecting your data.
14. Contact and Data Protection Officer
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have any concerns about our data practices, please contact us using the following details:
REALTASOFT LTD — DATA PROTECTION CONTACT
- Data Controller: Realtasoft
- Website: realtasoft.ie
- Registered Address: Office 16 Unit 1, North Park, North Road, Finglas, Dublin 11, D11 PR9X, Ireland
- Data Protection Contact Email: info@realtasoft.ie
- Phone: +353 1 4370869
DATA PROTECTION OFFICER (DPO)
- Data Controller: Realtasoft
- Website: realtasoft.ie
- Registered Address: Office 16 Unit 1, North Park, North Road, Finglas, Dublin 11, D11 PR9X, Ireland
- Data Protection Contact Email: info@realtasoft.ie
- Phone: +353 1 4370869
This Privacy Policy was last reviewed and updated on 15 April 2026.