GDPR Compliance
Our commitment to data protection and your rights under GDPR.
Last updated: November 2024
Our Commitment to GDPR
Harbor-crater is committed to protecting and respecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR), which came into effect following the UK's departure from the European Union. We take our data protection responsibilities seriously and have implemented comprehensive measures to ensure compliance.
Data Controller
Harbor-crater acts as the data controller for personal information collected through this website and our business operations. As data controller, we determine the purposes and means of processing personal data and are responsible for ensuring that processing complies with applicable data protection laws.
Lawful Basis for Processing
Under GDPR, we must have a valid legal basis for processing your personal data. We rely on the following lawful bases:
- Consent: We obtain your explicit consent before processing personal data for marketing communications or non-essential cookies
- Contractual Necessity: Processing required to deliver services you have requested or to respond to your enquiries
- Legitimate Interests: Processing necessary for running our business, improving our services, and protecting our legal rights, where such interests are not overridden by your data protection rights
- Legal Obligation: Processing required to comply with legal and regulatory requirements
Your Data Subject Rights
The GDPR provides you with specific rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.
Right to Rectification
You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
Right to Erasure
Also known as the right to be forgotten, you may request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or when you withdraw consent.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
Where technically feasible, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis, unless we can demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
Data Protection Measures
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data where appropriate
- Regular testing and evaluation of security measures
- Staff training on data protection principles
- Access controls limiting data access to authorised personnel
- Secure data storage and backup procedures
International Transfers
We primarily store and process personal data within the United Kingdom. If we need to transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where a breach is likely to result in a high risk to affected individuals, we will also notify those individuals directly.
Exercising Your Rights
To exercise any of your data protection rights, please contact us at:
Email: [email protected]
We will verify your identity before processing your request and respond within one month. In complex cases or where we receive numerous requests, we may extend this period by two further months, in which case we will inform you of the extension and the reasons for it.
Complaints
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR compliance information periodically to reflect changes in our practices or legal requirements. We encourage you to review this page regularly for the latest information on our data protection practices.