GDPR Compliance
Our commitment to data protection and your rights
wind-tern is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we meet our obligations under these regulations and outlines your rights regarding your personal data.
Data Controller
wind-tern acts as the data controller for personal information collected through our website and in the course of providing our event planning services. As the data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection laws.
Contact Details
For data protection enquiries, please contact us at:
Email: [email protected]
Address: 47 Commerce Street, Manchester, M2 4PW, United Kingdom
Principles of Data Processing
We adhere to the following principles when processing personal data:
- Lawfulness, fairness, and transparency: We process data lawfully and ensure individuals understand how their data is used
- Purpose limitation: We collect data for specified, explicit, and legitimate purposes
- Data minimisation: We collect only data that is necessary for the intended purposes
- Accuracy: We take reasonable steps to ensure personal data is accurate and up to date
- Storage limitation: We retain data only for as long as necessary
- Integrity and confidentiality: We implement appropriate security measures to protect personal data
- Accountability: We can demonstrate compliance with these principles
Your Data Protection Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
Right of Access
You have the right to request a copy of the personal information we hold about you. This is commonly known as a subject access request. We will respond to valid requests within one month.
Right to Rectification
If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to such requests without undue delay.
Right to Erasure
In certain circumstances, you have the right to request that we delete your personal information. This right is not absolute and applies where:
- The data is no longer necessary for its original purpose
- You withdraw consent where that was the basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
- Erasure is required to comply with a legal obligation
Right to Restrict Processing
You may request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have contested or while we consider an objection you have raised.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Rights Related to Automated Decision-Making
We do not currently make decisions based solely on automated processing that produce legal effects or similarly significantly affect individuals.
Exercising Your Rights
To exercise any of these rights, please contact us using the details provided above. We may need to verify your identity before processing your request. There is no fee for most requests, though we may charge a reasonable fee if a request is manifestly unfounded or excessive.
Data Breaches
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
Complaints
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Information
We review our data protection practices regularly and may update this page to reflect changes. We encourage you to check this page periodically for the latest information.
Last updated: January 2024