GDPR Compliance

Last updated: August 2024

Our Commitment to GDPR

jigsasubor is committed to ensuring the security and protection of the personal information that we process. We provide a compliant and consistent approach to data protection in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

jigsasubor acts as the data controller for personal information collected through our website and services. As a data controller, we determine the purposes and means of processing personal data.

Contact details:
jigsasubor
14 Queen Square
Bristol, BS1 4NT
United Kingdom
[email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal Obligation: Where processing is necessary for compliance with a legal obligation
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests

Your Rights Under GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right to Be Informed

You have the right to be informed about the collection and use of your personal data. This privacy information is provided through our Privacy Policy and this GDPR page.

Right of Access

You have the right to request access to your personal data and to obtain confirmation as to whether we are processing your personal data.

Right to Rectification

You have the right to have inaccurate personal data rectified or completed if it is incomplete.

Right to Erasure

You have the right to request the deletion or removal of personal data where there is no compelling reason for its continued processing.

Right to Restrict Processing

You have the right to request the restriction or suppression of your personal data in certain circumstances.

Right to Data Portability

You have the right to obtain and reuse your personal data for your own purposes across different services in a commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests, direct marketing, and processing for research purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.

Exercising Your Rights

To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month of receipt. If your request is complex or you have made multiple requests, we may extend this period by a further two months, and we will inform you of this extension.

We do not charge a fee for handling your request unless it is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee or refuse to act on the request.

Data Security Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular testing and evaluation of security measures
• Staff training on data protection
• Access controls and authentication procedures

Data Breach Procedures

In the event of a personal data breach, we have procedures in place to:

• Detect and assess the breach
• Notify the Information Commissioner's Office within 72 hours where required
• Notify affected individuals without undue delay where required
• Document the breach and our response

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom. Where international transfers are necessary, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Complaints

If you are not satisfied with how we handle your personal data or your rights request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
www.ico.org.uk

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.