GDPR Compliance

Last updated: September 2026

Our Commitment to GDPR

The Emerald Table is committed to ensuring the protection of personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). This page provides information about how we comply with GDPR requirements and your rights as a data subject.

Data Controller

The Emerald Table acts as the data controller for personal information collected through our website and reservation system. As the data controller, we determine the purposes and means of processing your personal data.

Contact details:
The Emerald Table
42 Grafton Quarter
Dublin 2, D02 HY84
Ireland
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases as defined by Article 6 of the GDPR:

• Performance of a Contract: When you make a reservation, we process your data to fulfil our contractual obligations to you.
• Legitimate Interests: We may process data for our legitimate business interests, such as improving our services, provided this does not override your fundamental rights and freedoms.
• Consent: Where required, we obtain your explicit consent before processing certain types of data, such as dietary information related to health conditions.
• Legal Obligation: We process data when necessary to comply with legal requirements.

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access (Article 15): You have the right to obtain confirmation of whether we process your personal data and to access that data.
• Right to Rectification (Article 16): You have the right to request correction of inaccurate personal data.
• Right to Erasure (Article 17): You have the right to request deletion of your personal data under certain circumstances.
• Right to Restriction (Article 18): You have the right to request restriction of processing under certain circumstances.
• Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used format.
• Right to Object (Article 21): You have the right to object to processing based on legitimate interests or direct marketing.
• Rights Related to Automated Decision-Making (Article 22): You have the right not to be subject to decisions based solely on automated processing.

Exercising Your Rights

To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month of receipt. In certain circumstances, this period may be extended by two further months, in which case we will inform you of the extension and the reasons for it.

We may request verification of your identity before processing your request to ensure we are providing information only to the correct individual.

Data Protection Principles

We adhere to the following data protection principles:

• Personal data is processed lawfully, fairly, and transparently
• Data is collected for specified, explicit, and legitimate purposes
• Data collection is limited to what is necessary for the stated purposes
• Personal data is accurate and kept up to date
• Data is retained only for as long as necessary
• Appropriate security measures protect personal data

Data Transfers

We do not routinely transfer personal data outside the European Economic Area (EEA). In the event that such transfers are necessary, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Ireland, this is the Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with an updated revision date.