Privacy Policy

Fíada is built to GDPR requirements. This policy explains how we collect, use, and protect your personal data. It applies to the fiada.ie marketing site and any future Fíada apps.

Who we are

Fíada is operated by Peak Media Limited (CRO 814520), Dublin, Ireland. Registered office: Malahide, Dublin K36 WK06. Contact: hello@fiada.ie.

What we collect on fiada.ie

When you fill in the waitlist form, we collect the name, email address, and any role or message you choose to share. We use this information only to contact you about Fíada. We do not sell or share it with third parties for marketing.

Location data (future app)

Once the Fíada app launches, location data is collected only during active sessions you choose to join. It is shared only with the session leader and other session participants you have authorised. It is deleted when the session ends. The audit trail (session name, participants, geofence shape, timestamps) is retained for compliance with duty-of-care obligations, with a documented retention window.

We do not sell location data to brokers. We do not use it for advertising. We do not track you outside of sessions.

Where your data is stored

Data is hosted in the EU (Germany, Nuremberg) on infrastructure operated by Hetzner Online GmbH. Backups are encrypted at rest. We do not transfer your personal data outside the EEA.

Sub-processors

We use the following sub-processors to operate Fíada. Each is bound by a written processing agreement consistent with GDPR Article 28:

• Hetzner Online GmbH (Germany), infrastructure hosting. EU data centre, Nuremberg region.
• Google LLC(EU data residency via Google Workspace), transactional email delivery for waitlist acknowledgements and operator magic-link sign-in. SPF, DKIM, and DMARC are enforced on the fíada.ie sending domain.
• Blacknight Internet Solutions Ltd (Ireland), authoritative DNS for fiada.ie. No customer personal data passes through Blacknight; resolution metadata only.

We will update this list before adding any new sub-processor. If you have an active Fíada contract, we will notify you in advance of any new sub-processor and give you the opportunity to object.

Vulnerable adults, minors, and elderly people

Fíada is designed for groups that include people who may not be able to give technical consent themselves, including children under 16, adults with intellectual disability, and elderly people living with dementia. In these cases the lawful basis for processing rests on the duty of care of the organisation or family member responsible. We follow the consent guidance in the Mental Capacity (Assisted Decision-Making) Act 2015 for adults, the Children First Act 2015 for minors in school or youth-group settings, and standard GDPR parental consent rules for under-16s outside those settings.

The participant view inside the future Fíada app surfaces a plain-language consent screen at every session join. A leader cannot enrol a participant without that participant (or their named decision-supporter) acknowledging the screen. We will publish the consent flow in detail before the app opens to users.

Breach notification

If we become aware of a personal data breach affecting your data, we will notify the Data Protection Commission of Ireland within 72 hours of becoming aware, as required by GDPR Article 33. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, as required by GDPR Article 34.

To reach the data protection lead at Peak Media Limited, email hello@fiada.ie with the subject “Data protection”. We answer within one working day.

Continuity

If Peak Media Limited ceases trading or stops operating Fíada for any reason, you keep what is already exportable. We will provide a final personal-data export within 30 days of the cease notice and delete the operational copies after that window. Your existing session audit logs, where retained for compliance with duty-of-care obligations, will be transferred to you or to a successor data controller you nominate, subject to your written instruction.

Your rights

Under GDPR you can request a copy of your data, ask us to correct inaccurate data, ask us to delete your data, object to processing, or ask us to restrict processing. Email hello@fiada.ie and we will respond within 30 days.

Complaints

If you believe we have not handled your data correctly, you can complain to the Data Protection Commission (Ireland), 21 Fitzwilliam Square South, Dublin 2, D02 RD28. Phone +353 578 684 800. Website dataprotection.ie.

Updates to this policy

We will update this page when there is a material change. The date at the top reflects the latest update.