GDPR Information

Last updated: September 2024

Our Commitment to Data Protection

wind-oryx is committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we comply with data protection legislation and your rights as a data subject.

Data Controller

wind-oryx is the data controller responsible for your personal data collected through this website. Our contact details are:

wind-oryx
47 Broadcast House
Manchester, M1 4QR
United Kingdom

Email: [email protected]

Your Rights Under GDPR

Under data protection law, you have the following rights:

• The right to be informed: You have the right to be informed about the collection and use of your personal data. This is fulfilled through this page and our Privacy Policy.
• The right of access: You have the right to request access to your personal data and supplementary information about how we process it.
• The right to rectification: You have the right to have inaccurate personal data corrected or completed if it is incomplete.
• The right to erasure: You have the right to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
• The right to restrict processing: You have the right to request the restriction or suppression of your personal data in certain circumstances.
• The right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
• The right to object: You have the right to object to processing based on legitimate interests, direct marketing, and processing for research purposes.
• Rights related to automated decision making: You have rights in relation to automated decision making and profiling.

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

There is no fee required to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. The lawful bases we rely on include:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Contract: Where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legal obligation: Where processing is necessary for us to comply with the law.
• Legitimate interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

Data Transfers

We primarily process and store data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place to protect your data in compliance with UK GDPR requirements.

Data Security

We have implemented appropriate technical and organisational measures to secure your personal data against accidental loss, unauthorised access, use, alteration, and disclosure. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, and the purposes for which we process your personal data.

Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF

Website: www.ico.org.uk

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

Changes to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.