tundra-vector is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we meet our obligations and respect your data protection rights.
Data Controller
tundra-vector acts as the data controller for personal information collected through this website and in the course of providing our services. This means we determine the purposes and means of processing your personal data.
Lawful Basis for Processing
We only process personal data when we have a lawful basis to do so. The bases we rely upon include:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
- Legal obligation: Where processing is necessary for us to comply with the law
- Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests
Your Rights Under UK GDPR
You have several rights regarding your personal data:
Right of Access
You can request a copy of the personal data we hold about you. We will respond within one month of receiving your request.
Right to Rectification
If you believe any information we hold about you is inaccurate or incomplete, you have the right to ask us to correct it.
Right to Erasure
In certain circumstances, you can request that we delete your personal data. This right is not absolute and may be subject to legal requirements we must fulfil.
Right to Restrict Processing
You can ask us to limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
Where technically feasible, you can request that we transfer your personal data to another organisation or directly to you in a structured, commonly used format.
Right to Object
You can object to processing of your personal data where we are relying on legitimate interests as the legal basis for processing.
Rights Related to Automated Decision Making
We do not use automated decision-making processes that produce legal or similarly significant effects concerning you.
Data Protection Measures
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data where appropriate
- Regular testing and evaluation of security measures
- Staff training on data protection responsibilities
- Access controls limiting who can view personal data
International Transfers
We do not routinely transfer personal data outside the United Kingdom. Where any transfer is necessary, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Data Breach Procedures
We have procedures in place to detect, investigate, and report personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
Exercising Your Rights
To exercise any of your rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond within one month, though this period may be extended by two further months for complex requests.
Complaints
If you are not satisfied with how we handle your personal data or your rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Last updated: January 2024