GDPR Compliance

Last updated: August 2024

This page outlines our commitment to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take your data protection rights seriously and strive to be transparent about how we handle your personal information.

Data Controller

atoll-peak is the data controller responsible for your personal data. Our contact details are:

atoll-peak
47 Redwood Lane
Kensington
London, W8 4PL
Email: [email protected]

Data Protection Principles

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency: We process data lawfully and in a transparent manner
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes
• Data minimisation: We collect only the data necessary for the intended purpose
• Accuracy: We keep personal data accurate and up to date
• Storage limitation: We retain data only as long as necessary
• Integrity and confidentiality: We process data securely with appropriate technical measures

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request, free of charge in most circumstances.

Right to Rectification

If you believe any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or complete it.

Right to Erasure

You may request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.

Right to Restriction

You can request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have rights regarding automated decision-making and profiling. We do not currently use automated decision-making that produces legal or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

International Transfers

We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
Website: ico.org.uk

Updates to This Information

We may update this GDPR compliance information from time to time. Any significant changes will be communicated through our website.