Privacy Policy

Rockstone Engineering is a cross-border engineering and specialist recruitment group operating through separate Swiss and Irish companies. The controller is the entity that decides why and how the relevant personal data is used.

Rockstone entities

For general website administration, the Swiss entity normally acts as controller unless the interaction is expressly directed to the Irish entity. The Irish entity normally controls Irish contracts, Irish employment and Irish recruitment activity; the Swiss entity normally controls the corresponding Swiss activity. The entities may act as independent controllers and, for a jointly managed activity, may be joint controllers. You can contact either entity through the group address below.

• identity and contact details, including name, employer, role, address, telephone number and email address;
• communications, meeting records, enquiries, proposals, contracts, purchase orders and account-administration records;
• website and device information, such as IP address, browser, device identifiers, consent choices and security logs;
• professional information from you, your organisation, referrals, public professional sources or legitimate business databases;
• financial and transaction information where needed for invoicing, payment, fraud prevention or statutory records; and
• special-category or criminal-offence information only where necessary, proportionate and permitted by law.

Where Rockstone relies on legitimate interests, it considers necessity, proportionality and your reasonable expectations. You may object as explained below.

Rockstone shares personal data only where necessary and subject to appropriate safeguards. Recipients may include the other Rockstone entity, professional advisers, IT and cloud providers, website and communications providers, banks, insurers, auditors, public authorities and counterparties to a corporate transaction. Service providers are required to protect data and act only on permitted instructions where they process data for Rockstone.

Information may be accessed from Switzerland, Ireland or another country used by an approved service provider. Transfers from the EEA to Switzerland may rely on the European Commission’s adequacy decision while it remains applicable. Other transfers use an adequacy decision, approved standard contractual clauses or another lawful safeguard. Information about the relevant safeguard is available on request, subject to necessary redactions.

Rockstone may retain information longer where required by law, a regulator, litigation hold or a live dispute, and may delete or anonymise it earlier where no longer needed.

• ask for access to, correction of or deletion of your personal data;
• ask Rockstone to restrict processing or provide portable data where the legal conditions apply;
• object to processing based on legitimate interests and object at any time to direct marketing;
• withdraw consent at any time without affecting earlier lawful processing; and
• complain to a competent data-protection authority.

Rockstone may need to verify identity and may refuse or limit a request where the law permits. Rockstone does not use solely automated decision-making that produces legal or similarly significant effects in the activities covered by this policy.

Rockstone uses organisational and technical measures designed for the sensitivity and risk of the information, including access controls, approved systems, confidentiality duties, secure configuration, backup and incident response. No internet service can be guaranteed completely secure. Rockstone assesses suspected personal-data breaches and notifies authorities and affected people where legally required.

Rockstone may update this policy to reflect legal, operational or technology changes. The website will show the current version and issue date. Material changes may be highlighted through the website or direct communication where appropriate.

Privacy questions, rights requests or complaints may be sent to info@rockstoneengineering.com. Please state which Rockstone entity, role, application, project or website interaction your request concerns. Rockstone will route it to the responsible team and entity.

You may also complain to the Irish Data Protection Commission (www.dataprotection.ie) or the Swiss Federal Data Protection and Information Commissioner (www.edoeb.admin.ch). You may contact the authority in the country connected with your matter; other competent authorities may also be available under applicable law.