Understanding your data protection rights under UK GDPR
Last updated: September 2024
vivid-basin is committed to ensuring that your personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about your rights and how we handle your data.
For the purposes of data protection legislation, the data controller is:
vivid-basin
14 Berkeley Square, Mayfair
London W1J 6BS
United Kingdom
Email: [email protected]
You have the right to be informed about how we collect and use your personal data. We provide this information through our Privacy Policy and this GDPR compliance page, ensuring transparency about our data processing activities.
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month, providing the information free of charge in most circumstances.
If you believe that personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete this information. We aim to update records within one month of receiving your request.
Also known as the "right to be forgotten," you may request that we delete your personal data in certain circumstances, including:
You may request that we restrict the processing of your personal data in specific situations, such as when you contest the accuracy of the data or when processing is unlawful but you do not want the data erased.
Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit this data to another controller.
You have the right to object to processing of your personal data in certain circumstances, including:
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects. We do not currently engage in fully automated decision-making processes.
To exercise any of your data protection rights, please contact us using the following methods:
We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.
To protect your personal data, we may need to verify your identity before processing your request. This helps ensure that personal data is not disclosed to unauthorised individuals.
We process personal data under the following lawful bases:
Where appropriate, we conduct Data Protection Impact Assessments (DPIAs) to identify and minimise data protection risks, particularly when introducing new technologies or processing activities that may result in high risk to individuals.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to you, we will also inform you directly.
If you are dissatisfied with how we have handled your personal data or responded to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We encourage you to contact us first so that we can address your concerns directly.
We may update this GDPR compliance information from time to time to reflect changes in our practices or applicable regulations. Any significant changes will be communicated through our website.
This information is provided to help you understand your rights under data protection law. For specific legal advice regarding your personal circumstances, we recommend consulting with a qualified legal professional.