GDPR Compliance
Our commitment to protecting your data under the General Data Protection Regulation.
Last updated: November 2024
Arc-aurora is committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines our approach to data protection and explains your rights under these regulations.
Our Role as Data Controller
Arc-aurora acts as a data controller for personal information collected through our website and during the provision of our services. As a data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with applicable data protection laws.
Data Protection Principles
We adhere to the following data protection principles:
- Lawfulness, fairness, and transparency: We process personal data lawfully, fairly, and in a transparent manner.
- Purpose limitation: We collect personal data only for specified, explicit, and legitimate purposes.
- Data minimisation: We ensure that personal data is adequate, relevant, and limited to what is necessary.
- Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date.
- Storage limitation: We retain personal data only for as long as necessary for the purposes for which it was collected.
- Integrity and confidentiality: We process personal data securely, protecting against unauthorised access, loss, or damage.
- Accountability: We demonstrate compliance with these principles through appropriate documentation and procedures.
Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal information we hold about you. We will provide this information within one month of receiving your request.
Right to Rectification
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to such requests within one month.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose or when you withdraw consent.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data.
Right to Data Portability
Where we process your data based on consent or for the performance of a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you.
Exercising Your Rights
To exercise any of your rights, please contact us using the details provided below. We may need to verify your identity before processing your request. We will respond to your request within one month, though this period may be extended by two months for complex requests.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to you, we will also notify you directly.
International Data Transfers
When we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office, to protect your data.
Data Protection Officer
For any queries related to data protection or to exercise your rights, please contact us at:
Email: [email protected]
Address: 47 Whitworth Street, Manchester, M1 5WW, United Kingdom
Complaints
If you are not satisfied with our response to your request or believe we are processing your data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113