GDPR Compliance
Data protection and your rights
General Data Protection Regulation Compliance
meta-marten is committed to protecting your personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. This page outlines our compliance measures and your rights under these regulations.
Data Controller
For the purposes of data protection legislation, meta-marten acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.
Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Legitimate interests: Processing service requests and maintaining business records necessary for our operations
- Contract: When processing is necessary to enter into or perform a contract for services
- Consent: For any optional communications or marketing activities, where you have provided explicit consent
Your Rights Under GDPR
You have the following rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We may charge a reasonable fee for multiple copies or manifestly unfounded requests.
Right to Rectification
You have the right to request correction of any personal data you believe is inaccurate or incomplete.
Right to Erasure
You have the right to request deletion of your personal data under certain conditions, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request restriction of processing your personal data under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly where processing is based on legitimate interests.
Right to Data Portability
You have the right to request transfer of your personal data to another organisation or directly to you, under certain conditions.
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit and at rest
- Access controls limiting data access to authorised personnel
- Regular security assessments and updates
- Staff training on data protection requirements
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, as required by GDPR.
International Data Transfers
We do not transfer personal data outside the United Kingdom. Should this change, we will ensure appropriate safeguards are in place as required by UK data protection law.
Exercising Your Rights
To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by a further two months and will inform you of any extension.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Information Commissioner's Office if you believe your data protection rights have been violated. Contact details:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: www.ico.org.uk