GDPR Compliance

This page provides information about how storm-puffin complies with the General Data Protection Regulation (GDPR) for visitors and clients located in the European Economic Area (EEA). We are committed to protecting your personal data and respecting your privacy rights.

Data Controller

storm-puffin acts as the data controller for personal information collected through our website and services. For any enquiries regarding data protection, you may contact us at:

storm-puffin
42 Greenway Avenue
Sandton, Johannesburg
South Africa
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you voluntarily provide information through our contact forms or subscribe to communications
• Contract: When processing is necessary to fulfil a service agreement with you
• Legitimate Interest: For purposes such as improving our services and website security, where such interests do not override your rights
• Legal Obligation: When we are required to process data to comply with applicable laws

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by a further two months, but we will notify you of any extension within the initial one-month period.

Data Transfers

As our business operates in South Africa, your data may be transferred to and processed in South Africa. When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws. Specific retention periods are outlined in our Privacy Policy.

Complaints

If you believe that we have not handled your personal data appropriately, you have the right to lodge a complaint with your local data protection authority. However, we encourage you to contact us first so we can address your concerns directly.

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or applicable regulations. Any significant changes will be communicated through our website.

Last updated: January 2024