GDPR Information

Last updated: January 2024

Your Rights Under GDPR

The General Data Protection Regulation (GDPR) provides you with certain rights regarding your personal data. This page explains these rights and how to exercise them.

Data Controller

Snow-dive acts as the data controller for personal information collected through this website. We are responsible for deciding how we hold and use personal information about you.

Contact details:
snow-dive
Unit 7, Highland Enterprise Park
Inverness, IV2 7GD
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests do not override your fundamental rights and freedoms.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.

Your Individual Rights

Under GDPR, you have the following rights:

Right to Access

You have the right to request a copy of the personal information we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.

Right to Rectification

You have the right to request that we correct any personal information we hold about you that is inaccurate or incomplete.

Right to Erasure

You have the right to request that we delete your personal information in certain circumstances, including:

• When the data is no longer necessary for the purpose it was originally collected
• When you withdraw consent (where consent was the legal basis for processing)
• When you object to processing and there are no overriding legitimate grounds
• When the data has been unlawfully processed

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data or object to its processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data where we are relying on legitimate interests as the legal basis for processing, or where processing is for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: [email protected]

We will respond to your request within one month. In some cases, this period may be extended by a further two months where requests are complex or numerous.

Right to Lodge a Complaint

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period varies depending on the context of the processing and our legal obligations.

International Transfers

We do not routinely transfer personal data outside the United Kingdom or European Economic Area. Should this become necessary, we will ensure appropriate safeguards are in place to protect your data.