Ventum Engineering

Privacy Policy

Privacy Policy

Last Updated: September 2026

Ventum Engineering Limited ("we", "us", or "our") is committed to protecting the privacy, confidentiality, and security of the personal and technical data entrusted to us. This Privacy Policy details how we collect, process, manage, and safeguard your data in accordance with the General Data Protection Regulation (EU 2016/679) ("GDPR") and the Data Protection Acts 1988–2018.

This policy applies to all personal data collected through our website (https://www.ventumengineering.com), formal tender submissions, technical consultations, quote requests, and during the operational execution of mechanical ventilation, airtightness, and engineering site services.

1. Data Controller Information

Ventum Engineering Limited acts as the Data Controller responsible for your personal data.

  • Company Name: Ventum Engineering Limited

  • Company Registration Office (CRO) Number: No. SR8814340

  • Registered Office: Coliemore House, Coliemore Road, Dalkey, Co. Dublin, Ireland, A96 A8D5

  • Data Protection Contact: contact@ventumengineering.com

  • Telephone: +353 87 708 2836

2. Information We Collect

We process personal and technical data strictly necessary to evaluate, design, install, test, and commission high-performance building engineering systems:

  • Identity & Contact Data: Full name, business/company name, professional title, billing address, site address, direct telephone numbers, and email addresses.

  • Project & Technical Data: Architectural CAD/PDF floor plans, structural sections, elevations, site surveys, floor area (m²), room volume metrics, planned occupancy levels, Building Energy Rating (BER) assessments, DEAP calculations, and target air permeability parameters (q50​ / n50​).

  • Regulatory & Statutory Records: On-site airflow validation readings, installer commissioning certificates, calibration records, and correspondence relevant to the Assigned Certifier, Design Certifier, or the local Building Control Authority.

  • Transaction & Financial Data: Bank details, invoicing records, VAT numbers, payment processing histories, and relevant grant references (e.g., SEAI Better Energy Homes scheme documentation).

  • Technical Usage & Device Data: IP addresses, browser specifications, operating system details, time zone settings, and website navigation patterns collected via strictly necessary and analytical cookies.

3. Lawful Bases and Purposes of Processing

In compliance with Article 6 of the GDPR, we process your personal and technical data under the following legal grounds:

  • Performance of a Contract (Art. 6(1)(b) GDPR):

    To evaluate project briefs, conduct design calculations (l/s), generate commercial quotations, supply hardware, execute diamond core drilling, install ventilation systems and airtight membranes, and carry out system balancing.

  • Compliance with Legal and Statutory Obligations (Art. 6(1)(c) GDPR):

    To fulfill our statutory engineering requirements under the Building Control Regulations 1997–2021, Technical Guidance Document (TGD) Part F (2019), Part L (Conservation of Fuel and Energy), and mandatory notifications processed via the Building Control Management System (BCMS). In addition, we retain transaction data to satisfy Irish taxation requirements under the Taxes Consolidation Act 1997.

  • Legitimate Business Interests (Art. 6(1)(f) GDPR):

    To maintain project design archives, verify acoustic and structural parameters, coordinate with main contractors and design teams on live construction sites, resolve commercial inquiries, and maintain site security and quality assurance standards.

  • Consent (Art. 6(1)(a) GDPR):

    To provide technical industry updates, newsletters, or peer-review publications where you have explicitly opted in. Consent may be revoked at any time.

4. Technical Data Retention & Statutory Construction Obligations

We will only retain personal and technical data for as long as necessary to fulfill the purposes for which it was gathered, and to satisfy mandatory statutory, accounting, and legal liability requirements.

  • Statute of Limitations (Irish Construction Law):

    In accordance with the Statute of Limitations 1957 (as amended), technical design documentation, airflow balance certifications, installation records, and sign-off paperwork are retained for a minimum period of six (6) years from the date of practical completion (or twelve (12) years where the contract was executed under seal / as a deed). This retention is critical to support warranty covenants, latent structural inquiries, and Assigned Certifier compliance audits.

  • Financial & Taxation Data:

    Retained for a minimum of six (6) years following the end of the relevant financial year, in compliance with Irish Revenue Commissioners requirements.

  • Unaccepted Quotations & Project Enquiries:

    Where a submitted floor plan or quotation request does not proceed to an executed project, technical drawings and contact data will be securely purged within twelve (12) months of our final correspondence, unless a longer retention period is explicitly requested by the prospective client.

5. Data Disclosures and Third-Party Sharing

Ventum Engineering Limited does not sell, trade, or lease personal information. We disclose project data strictly on a need-to-know basis to trusted third parties essential for the regulatory execution and technical certification of your building:

  • Statutory Bodies & Certified Assessors: The local Building Control Authority, the National Standards Authority of Ireland (NSAI), Building Control Officers via the BCMS platform, SEAI grant auditors, and project Assigned/Design Certifiers to achieve lawful completion sign-offs.

  • Independent Third-Party Testing Auditors: Where accredited external air permeability testing (Blower Door) or statutory independent ventilation validation is required by the project specifications.

  • Manufacturing & Prefabrication Partners: Including Tadeks Fertig Haus (Tadeks.pl), solely where we act as the designated ventilation partner for their prefabricated building envelopes and technical integration is required.

  • Professional Technical Advisors: Appointed consulting structural engineers, acoustic specialists, insurers, and legal counsel operating under professional obligations of confidentiality.

  • Cloud & Operational Service Providers: Secure hosting, encrypted data backup, and enterprise workflow applications operating within the European Economic Area (EEA) under standard data processing agreements.

Where data must be transferred outside the European Economic Area, we implement EU Standard Contractual Clauses (SCCs) to guarantee equivalent data protection standards.

6. Technical & Organizational Data Security

We implement robust, multi-layered technical security protocols to protect digital and physical assets, including:

  • End-to-end encrypted storage of CAD/architectural schematics and customer records.

  • Role-based access restrictions ensuring only qualified engineering staff access project files.

  • Regular cybersecurity audits and perimeter firewall maintenance to defend against unauthorized access, loss, or data exfiltration.

7. Your Statutory Rights Under GDPR

As a data subject in Ireland, you hold the following statutory rights, subject to certain conditions and limitations under Irish construction law and statutory retention requirements:

  • Right of Access: Obtain confirmation as to whether your data is being processed and obtain a copy of held records.

  • Right to Rectification: Rectify incomplete, inaccurate, or outdated technical and personal data.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of data, provided its retention is not mandated by the Building Control Regulations, tax law, or ongoing statutory liability windows under the Statute of Limitations.

  • Right to Restriction of Processing: Request temporary restriction of processing during accuracy disputes.

  • Right to Data Portability: Request the transfer of your digital project submissions to another engineering provider in a structured, machine-readable format.

  • Right to Object: Object to data processing predicated exclusively on our legitimate business interests.

To submit a Data Subject Access Request (DSAR) or exercise your legal rights, contact us in writing at contact@ventumengineering.com. We respond to all verified requests within thirty (30) calendar days.

8. Cookies and Web Tracking

Our website uses essential functional cookies to enable navigation and secure form submissions, as well as aggregated analytical cookies to monitor site traffic. You may modify your browser preferences to reject non-essential cookies via our on-site cookie consent banner. Please note that disabling essential cookies may impact quotation form submissions.

9. Supervisory Authority & Complaints

If you have concerns regarding our processing of your personal data, we request that you contact our engineering team directly so we can resolve the matter promptly.

However, you maintain the statutory right to lodge an official complaint with the national supervisory authority in Ireland:

Data Protection Commission (DPC)

  • Headquarters: 6 Pembroke Road, Dublin 4, D04 V2T9, Ireland

  • Website: www.dataprotection.ie

  • Telephone: +353 (0)1 765 0100 / 1800 437 737