Our commitment to protecting your data under the General Data Protection Regulation
Last updated: November 2024
Saga-geyser is committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. We have always had a robust and effective data protection program in place which complies with existing law and abides by the data protection principles.
For the purposes of the General Data Protection Regulation, the data controller is:
Saga-geyser
47 Broadcast House
Media Quarter
Manchester M1 5BT
United Kingdom
We process personal data under the following legal bases:
Under the General Data Protection Regulation, you have the following rights:
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
You have the right to request that we erase your personal data, under certain conditions. This is also known as the "right to be forgotten".
You have the right to request that we restrict the processing of your personal data, under certain conditions.
You have the right to object to our processing of your personal data, under certain conditions.
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
If you wish to exercise any of the rights set out above, please contact us at [email protected]. We will respond to your request within one month of receiving it. In certain circumstances, we may extend this period by a further two months, in which case we will inform you of this extension.
You will not have to pay a fee to access your personal data or to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
We may transfer your personal data outside the European Economic Area (EEA) only where appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or transfers to countries deemed to have adequate data protection laws.
In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours where feasible, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you are not satisfied with our response to any enquiry or complaint, or believe our processing of your information does not comply with data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk
For any questions regarding this GDPR compliance statement or our data practices, please contact us:
Email: [email protected]