ÉireBaile Infrastructure: GDPR & Biometric Privacy Protocol

Effective Date: 2026 Academic & Corporate Term Data Controller: ÉireBaile Strategic Holdings (EEA Operations)

As a high-security, 95% AI-managed infrastructure, ÉireBaile processes critical personal, financial, and biometric data. We operate under a strict "Data Sovereignty" model, ensuring absolute compliance with the European Union General Data Protection Regulation (EU GDPR) and the Data Protection Act 2018.

1. Biometric Data Processing (Article 9 GDPR Compliance)

To facilitate our keyless, high-security ecosystem, we process encrypted smartphone-based biometric signatures.

• Explicit Consent: Biometric enrollment is strictly opt-in and executed during the digital onboarding phase.

• Zero-Knowledge Architecture: Your biometric data is never stored as raw imagery. It is converted into a mathematically irreversible hash and siloed locally on encrypted servers.

• The 72-Hour Purge Protocol: Upon the termination of your License to Occupy, your biometric access hash is systematically purged from our network within 72 hours.

2. Sovereign Fintech & Telemetry Data

• Financial Data: All rent, utility, and marketplace transactions are processed through highly encrypted, Level 1 PCI-DSS compliant gateways. ÉireBaile does not hold direct credit card numbers on its operational servers.

• Environmental Telemetry: To maintain our ecosystem, AI sensors monitor in-suite environmental health (humidity, extreme temperature shifts, and smoke detection). These sensors do not capture audio or visual recordings of occupants.

3. Third-Party Processors & The 11-Entity Silo

Data is shared exclusively within the ÉireBaile 11-entity corporate structure for operational necessities (e.g., sharing transit data with the Transport Unit for airport pickups). We do not sell, broker, or monetize resident data to external third-party advertisers.

4. Subject Access Rights (DSAR)

Under the GDPR, you retain absolute sovereignty over your digital footprint. You possess the right to:

• Request a complete audit of the data we hold (Right of Access).

• Demand immediate erasure of non-statutory data (Right to be Forgotten).

• Restrict algorithmic profiling related to ecosystem marketing.

To execute a Subject Access Request, contact the ÉireBaile Techno-Legal Compliance Unit at legal@eirebaile.ie.