GDPR Compliance
Our commitment to protecting your personal data
Introduction
subinimpaz is committed to complying with the UK General Data Protection Regulation and ensuring that your personal data is collected, processed, and stored in accordance with the highest standards of data protection.
This page provides specific information about our GDPR compliance practices and how we safeguard your rights as a data subject.
Data controller
For the purposes of data protection legislation, subinimpaz is the data controller responsible for your personal information.
subinimpaz
47 Berwick Street
London W1F 8SJ
United Kingdom
Email: [email protected]
Lawful basis for processing
We only process your personal data when we have a lawful basis to do so under GDPR. The lawful bases we rely on include:
Consent
When you provide explicit consent for us to process your personal data for specific purposes, such as submitting an enquiry form or signing up for communications. You have the right to withdraw consent at any time.
Contract
When processing is necessary for the performance of a contract with you, such as delivering the professional development programme you have enrolled in.
Legitimate interests
When processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights and freedoms. This includes improving our services, website functionality, and ensuring security.
Legal obligation
When we are required to process your data to comply with legal obligations, such as maintaining educational records or responding to lawful requests from authorities.
Your GDPR rights
Under the UK GDPR, you have comprehensive rights regarding your personal data:
Right to be informed
You have the right to clear, transparent information about how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR page.
Right of access
You have the right to request access to the personal data we hold about you. This is commonly known as a "subject access request." We will provide you with a copy of your personal data free of charge within one month of your request.
Right to rectification
If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it. We will respond to your request within one month.
Right to erasure
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected, when you withdraw consent, or when you object to processing.
Right to restrict processing
You have the right to request that we restrict how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
Right to data portability
Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer it to another data controller.
Right to object
You have the right to object to our processing of your personal data based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
Rights related to automated decision-making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects you. We do not currently engage in automated decision-making.
How to exercise your rights
To exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request."
Please include the following information in your request:
- Your full name
- Contact email address
- Specific right you wish to exercise
- Details of your request
We will verify your identity before processing your request to ensure we are disclosing information only to the correct individual. We will respond to valid requests within one month, or inform you if we require an extension.
Data protection principles
We adhere to the following data protection principles as required by GDPR:
- Lawfulness, fairness, and transparency: We process data lawfully, fairly, and in a transparent manner
- Purpose limitation: We collect data for specified, explicit, and legitimate purposes only
- Data minimisation: We collect only the data that is necessary for our purposes
- Accuracy: We take reasonable steps to ensure personal data is accurate and up to date
- Storage limitation: We retain personal data only for as long as necessary
- Integrity and confidentiality: We implement appropriate security measures to protect personal data
- Accountability: We take responsibility for compliance and can demonstrate our adherence to these principles
Data protection impact assessments
Where our processing activities are likely to result in high risk to individuals' rights and freedoms, we conduct Data Protection Impact Assessments to identify and mitigate those risks.
Data breaches
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach, and we will inform you without undue delay where required by law.
Third-party processors
When we engage third-party service providers who process personal data on our behalf, we ensure they provide sufficient guarantees of GDPR compliance. We maintain written contracts with all processors that set out their data protection obligations.
International data transfers
Your personal data is processed and stored within the United Kingdom. If we need to transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK authorities.
Complaints
If you are not satisfied with how we have handled your personal data or responded to your requests, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: ico.org.uk
We encourage you to contact us first so we can attempt to resolve any concerns you may have.
Updates to this page
We may update this GDPR compliance page to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.