GDPR Statement

 

Legal Basis for Processing Personal Data

Under the UK GDPR, we rely on the following legal bases for processing your personal data:

  1. Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
  2. Consent: Where you have provided your explicit consent for specific processing activities.
  3. Legal Obligation: Processing is necessary to comply with a legal obligation.
  4. Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

 

International Data Transfers

As part of our operations, we may transfer your personal data to countries outside the European Economic Area (EEA) or the United Kingdom. In such cases, we will ensure that adequate safeguards are in place to protect your data, such as standard contractual clauses or other lawful mechanisms.

 

Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Your Rights Under UK GDPR

You have the following rights under the UK GDPR:

  1. Right of Access: You can request a copy of the personal data we hold about you.
  2. Right to Rectification: You can request correction of inaccurate or incomplete personal data.
  3. Right to Erasure: You can request the deletion of your personal data under certain circumstances.
  4. Right to Restriction of Processing: You can request the restriction of processing of your personal data under certain circumstances.
  5. Right to Data Portability: You can receive your personal data in a structured, commonly used, and machine-readable format.
  6. Right to Object: You can object to the processing of your personal data under certain circumstances.

To exercise any of these rights, please contact us using the information provided in the “Contact Us” section of this Privacy Policy.

 

Data Protection Officer

We have appointed a Data Protection Officer (DPO) who can be contacted at info@mmakravmaga.com for any questions or concerns related to the processing of your personal data.