Our commitment to GDPR
eromparmad is committed to full compliance with the General Data Protection Regulation (GDPR). We take our responsibilities regarding data protection seriously and have implemented appropriate measures to safeguard your personal information.
Legal basis for processing
We process personal data based on one or more of the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary for a contract we have with you
- Legal obligation: Processing is necessary to comply with the law
- Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your rights do not override these interests
Your GDPR rights
Under GDPR, you have the following rights regarding your personal data:
Right to be informed
You have the right to clear, transparent information about how we use your personal data.
Right of access
You have the right to request copies of your personal data. We may charge a small fee for this service.
Right to rectification
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to erasure
You have the right to request that we erase your personal data, under certain conditions.
Right to restrict processing
You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to object to processing
You have the right to object to our processing of your personal data, under certain conditions.
Right to data portability
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Data protection officer
For questions about GDPR compliance or to exercise your rights, please contact us at [email protected]
Data security measures
We have implemented appropriate technical and organizational security measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication procedures
- Staff training on data protection
- Secure data storage and backup systems
Data breach notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.
International data transfers
If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
Automated decision-making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Complaints
If you believe we have not complied with GDPR requirements, you have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).
Contact us
For any questions about our GDPR compliance or to exercise your rights:
Email: [email protected]
Address: 42 Wellspring Lane, Richmond, London TW9 2PH, United Kingdom