Our commitment to data protection under European regulation
lagoon-quest is committed to ensuring compliance with the General Data Protection Regulation (GDPR), which came into effect on 25 May 2018. This page outlines how we process personal data in accordance with GDPR requirements and explains your rights as a data subject.
For the purposes of the GDPR, the data controller is:
lagoon-quest
47 Chancery Lane
London, WC2A 1PL
United Kingdom
Email: [email protected]
Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:
The GDPR provides you with the following rights regarding your personal data:
You have the right to be informed about the collection and use of your personal data. This GDPR page and our Privacy Policy provide you with this information.
You have the right to obtain confirmation as to whether your personal data is being processed and, if so, access to that personal data along with supplementary information about the processing.
You have the right to have inaccurate personal data rectified and incomplete personal data completed.
Also known as the "right to be forgotten," you have the right to have your personal data erased in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.
You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of your rights under the GDPR, please contact us using the details provided above. We will respond to your request within one month of receiving it. In certain circumstances, this period may be extended by a further two months, in which case we will inform you of the extension and the reasons for it.
We may request specific information from you to help us confirm your identity and ensure your right to access your personal data. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
While our organisation is not required to appoint a Data Protection Officer under the GDPR, we have designated a privacy contact to handle all data protection matters. You can reach our privacy contact at: [email protected]
We primarily process and store data within the United Kingdom and European Economic Area. If we transfer personal data outside these regions, we ensure appropriate safeguards are in place in accordance with GDPR requirements, such as Standard Contractual Clauses or adequacy decisions.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you are not satisfied with our response to any complaint or believe our processing of your personal data does not comply with the GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom
Website: www.ico.org.uk
We may update this GDPR compliance information from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically for the latest information on our GDPR compliance.