Your data protection rights under the UK General Data Protection Regulation
Last updated: November 2024
Base-geyser is committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your rights and how we handle your personal information.
Base-geyser is the data controller for personal information collected through this website and our services. This means we determine the purposes and means of processing your personal data.
Contact details:
Base-geyser
47 Victoria Street
Westminster
London SW1H 0EU
United Kingdom
Email: [email protected]
Under the UK GDPR, you have the following rights regarding your personal data:
You have the right to know how your personal data is being used. We provide this information through our Privacy Policy and this GDPR page.
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.
You have the right to have inaccurate personal data corrected or incomplete data completed. We will respond to rectification requests within one month.
Also known as the "right to be forgotten", you can request the deletion of your personal data in certain circumstances, including:
You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making.
To exercise any of these rights, please contact us:
Please provide sufficient information to identify yourself and specify which right you wish to exercise. We may need to verify your identity before processing your request.
We will respond to your request within one month. This period may be extended by two further months where necessary, considering the complexity and number of requests. We will inform you of any such extension within one month of receipt.
We process personal data on the following legal bases:
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
We primarily process data within the United Kingdom. Any transfer of personal data outside the UK will only occur where appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or binding corporate rules.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
We may update this GDPR information periodically. We will post any changes on this page and update the "last updated" date.