GDPR Compliance

Last Updated: January 2024

Our Commitment to GDPR

Mountain-falcon is committed to ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take your privacy seriously and have implemented measures to ensure that your personal data is processed lawfully, fairly, and transparently.

Data Controller

For the purposes of the UK GDPR, mountain-falcon acts as the data controller for personal information collected through this website and our services. This means we determine the purposes and means of processing your personal data.

Lawful Basis for Processing

We only process your personal data when we have a lawful basis to do so. The lawful bases we rely upon include:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.

Your Rights Under GDPR

The UK GDPR provides you with specific rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.

Right to Rectification

You have the right to request that we correct any personal data that is inaccurate or incomplete.

Right to Erasure

Also known as the "right to be forgotten," you may request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

How to Exercise Your Rights

To exercise any of your rights under the UK GDPR, please contact us using the information below. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

Data Transfers

We take appropriate safeguards to ensure that any transfer of personal data outside the UK is carried out in compliance with applicable data protection laws. Where we transfer data to third parties, we ensure that appropriate contractual protections are in place.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

Data Protection Officer

If you have any questions about our GDPR compliance or wish to exercise your rights, please contact our data protection team:

Email: [email protected]
Address: Unit 4, Broadcast Centre, Media Park, Manchester, M15 4QT, United Kingdom

Supervisory Authority

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113