GDPR Compliance

Snow-condor is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we fulfil our obligations and respect your data protection rights.

Data Controller Information

Snow-condor acts as the data controller for personal information collected through our website and services. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection requirements.

Contact address: 47 Whitfield Street, London W1T 4HF

Principles of Data Processing

We adhere to the core principles of UK GDPR in all our data processing activities:

• Lawfulness, fairness and transparency: We process data only with valid legal basis and communicate clearly about our practices
• Purpose limitation: We collect data only for specified, explicit and legitimate purposes
• Data minimisation: We collect only data that is necessary for the stated purposes
• Accuracy: We take reasonable steps to ensure personal data is accurate and up to date
• Storage limitation: We retain data only for as long as necessary
• Integrity and confidentiality: We implement appropriate security measures to protect personal data
• Accountability: We maintain records and can demonstrate compliance with these principles

Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of Access

You can request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request, along with details about how we process your data.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you can request that we correct or complete it. We will respond to such requests within one month.

Right to Erasure

In certain circumstances, you can request that we delete your personal data. This applies when the data is no longer necessary for its original purpose, when you withdraw consent, or when we have no legitimate reason to continue processing.

Right to Restrict Processing

You can request that we limit how we use your data while we verify its accuracy or consider your objection to processing.

Right to Data Portability

Where processing is based on consent or contract, you can request your data in a structured, commonly used format so you can transfer it to another organisation.

Right to Object

You can object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision Making

We do not use automated decision-making processes that produce legal or similarly significant effects without human involvement.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the details on our contact page. We will verify your identity before processing your request to ensure the security of your personal data.

There is no fee for most requests. However, we may charge a reasonable fee if your request is clearly unfounded or excessive. We may also refuse to comply with such requests.

International Transfers

We primarily process personal data within the United Kingdom. If we need to transfer data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Data Breach Procedures

We maintain procedures to detect, investigate, and report personal data breaches. If a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

Supervisory Authority

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
ico.org.uk

Updates to This Information

We review our GDPR compliance practices regularly and will update this page as necessary to reflect any changes in our procedures or legal requirements.

Last updated: January 2024