Our Commitment to GDPR
ostresparg is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle personal data in accordance with these regulations.
Data Controller
ostresparg acts as the data controller for personal information collected through this website. We determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection laws.
Contact Details
Address: 47 Camden High Street, London, NW1 7JE, United Kingdom
Email: [email protected]
Types of Data Processed
We process the following categories of personal data:
- Identity data: name as provided in contact forms
- Contact data: email address
- Technical data: IP address, browser type, operating system
- Usage data: information about how you use our website
- Project data: details about your project as voluntarily provided
Legal Bases for Processing
We rely on the following legal bases when processing your personal data:
Consent
When you submit a contact form, you provide consent for us to process your data to respond to your enquiry. You may withdraw consent at any time by contacting us.
Legitimate Interests
We may process data based on our legitimate business interests, such as improving our services, provided these interests do not override your fundamental rights and freedoms.
Legal Obligation
We may process data to comply with legal requirements, such as maintaining business records.
Your Rights Under GDPR
You have the following rights regarding your personal data:
Right of Access
You may request a copy of the personal data we hold about you.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data in certain circumstances.
Right to Restrict Processing
You may request that we limit how we use your data.
Right to Data Portability
You may request to receive your data in a structured, commonly used format.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Contact form submissions are retained for two years unless a business relationship is established or you request earlier deletion.
Data Security
We implement appropriate technical and organisational measures to protect personal data, including secure data transmission protocols and access controls.
International Transfers
We primarily process data within the United Kingdom. If data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Exercising Your Rights
To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month. If your request is complex, we may extend this period by a further two months, and we will inform you if this is the case.
Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page.