GDPR Compliance
brisk-plateau.net is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This document outlines how we comply with GDPR requirements and explains your rights under this regulation.
Data Controller
The data controller responsible for your personal information is:
brisk-plateau.net
47 Kingsway Boulevard
Camden Town
London NW1 8QR
United Kingdom
Email: [email protected]
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent for specific processing activities
- Contract performance: When processing is necessary to fulfill service agreements
- Legitimate interests: When processing is necessary for our legitimate business interests, balanced against your rights
- Legal obligation: When processing is required to comply with legal requirements
Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
Right of Access
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data.
Right to Rectification
You have the right to request correction of inaccurate personal data and to have incomplete data completed.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing
You have the right to request that we restrict processing of your personal data in specific situations.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
When processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Data Protection Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication procedures
- Staff training on data protection
- Incident response procedures
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Specific retention periods depend on the type of data and the purpose of processing.
International Data Transfers
If we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month of receipt. In complex cases, this period may be extended by an additional two months, and we will inform you of any such extension.
Right to Lodge a Complaint
If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with your local supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO).
Changes to This Notice
We may update this GDPR compliance notice from time to time. We will notify you of any significant changes by posting the updated notice on our website.