Legal Basis for Processing Personal Data
Under the UK GDPR, we rely on the following legal bases for processing your personal data:
- Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
- Consent: Where you have provided your explicit consent for specific processing activities.
- Legal Obligation: Processing is necessary to comply with a legal obligation.
- Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.
International Data Transfers
As part of our operations, we may transfer your personal data to countries outside the European Economic Area (EEA) or the United Kingdom. In such cases, we will ensure that adequate safeguards are in place to protect your data, such as standard contractual clauses or other lawful mechanisms.
Your Rights Under UK GDPR
You have the following rights under the UK GDPR:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete personal data.
- Right to Erasure: You can request the deletion of your personal data under certain circumstances.
- Right to Restriction of Processing: You can request the restriction of processing of your personal data under certain circumstances.
- Right to Data Portability: You can receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You can object to the processing of your personal data under certain circumstances.
Data Protection Officer
We have appointed a Data Protection Officer (DPO) who can be contacted at email@example.com for any questions or concerns related to the processing of your personal data.