Understanding your data protection rights under the General Data Protection Regulation
sosperiuti is committed to ensuring that your privacy is protected and that we process your personal data in compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we meet our obligations under these regulations.
sosperiuti acts as the data controller for personal data collected through our website and services. As data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection legislation.
Contact details:
sosperiuti
47 Wellness Lane
London, SW1A 2AA
United Kingdom
Email: [email protected]
Under the GDPR, you have the following rights regarding your personal data:
You have the right to be informed about the collection and use of your personal data. We provide this information through our Privacy Policy and this GDPR page.
You have the right to request access to your personal data. This is commonly known as a "subject access request" and allows you to receive a copy of the personal data we hold about you.
You have the right to have inaccurate personal data rectified or completed if it is incomplete.
You have the right to request the deletion or removal of personal data where there is no compelling reason for its continued processing. This is also known as the "right to be forgotten".
You have the right to request the restriction or suppression of your personal data in certain circumstances.
You have the right to obtain and reuse your personal data for your own purposes across different services. This allows you to move, copy, or transfer personal data easily.
You have the right to object to processing based on legitimate interests or the performance of a task in the public interest, direct marketing, and processing for purposes of scientific or historical research and statistics.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects.
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month of receipt. In certain circumstances, this period may be extended by two further months.
We may request specific information from you to help us confirm your identity and ensure your right to access your personal data or to exercise any of your other rights.
We only process personal data where we have a lawful basis to do so. Our lawful bases include:
We maintain records of our processing activities as required under Article 30 of the GDPR. These records include the purposes of processing, categories of personal data, and details of any third parties to whom data is disclosed.
Where processing is likely to result in a high risk to individuals' rights and freedoms, we conduct Data Protection Impact Assessments (DPIAs) to identify and minimise data protection risks.
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach.
We do not routinely transfer personal data outside the United Kingdom. Where international transfers are necessary, we ensure appropriate safeguards are in place to protect your data.
If you are not satisfied with our response to your request or believe we are processing your personal data in a way that is not lawful, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk