GDPR Compliance
Understanding your data protection rights under the General Data Protection Regulation
Our Commitment to GDPR
chrommarij is committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take the protection of your personal data seriously and have implemented measures to ensure your rights are respected.
Data Controller
For the purposes of data protection legislation, chrommarij acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.
Your Rights Under GDPR
The GDPR provides you with specific rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal information we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification
If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
Right to Erasure
In certain circumstances, you have the right to request that we delete your personal data. This includes situations where the data is no longer necessary for its original purpose or where you withdraw consent.
Right to Restrict Processing
You may request that we limit the way we use your personal data while a complaint is being investigated or to exercise or defend legal claims.
Right to Data Portability
Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that significantly affects you, unless necessary for entering into a contract or authorised by law.
How to Exercise Your Rights
To exercise any of your data protection rights, please contact us using the details provided below. We may need to verify your identity before processing your request. We aim to respond to all legitimate requests within one month.
Data Security Measures
We have implemented appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, and unauthorised disclosure or access. These measures include:
- Secure storage systems with access controls
- Encrypted data transmission
- Regular security assessments
- Staff training on data protection
- Incident response procedures
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Supervisory Authority
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow, Cheshire
SK9 5AF
Website: ico.org.uk
Contact Our Data Protection Team
For any questions regarding GDPR compliance or to exercise your data protection rights:
chrommarij
42 Regent Street
London, W1B 5TE
United Kingdom
Email: [email protected]