GDPR Compliance

Our Commitment to GDPR

Sandy-Trek is committed to complying with the General Data Protection Regulation (GDPR) and ensuring that your personal data is processed lawfully, fairly, and transparently. This page outlines our GDPR compliance measures and your rights as a data subject.

Data Controller

Sandy-Trek acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing your personal data.

Contact details:
Sandy-Trek
47 Kensington High Street
London W8 5ED
Email: [email protected]

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Consent: Where you have given clear consent for us to process your data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal obligation: Where processing is necessary to comply with our legal obligations

Your Rights Under GDPR

Under the GDPR, you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restrict processing: You can request limitation of processing in certain situations
• Right to data portability: You can request your data in a structured, machine-readable format
• Right to object: You can object to processing based on legitimate interests or direct marketing
• Rights related to automated decision-making: You have rights concerning automated decisions and profiling

Exercising Your Rights

To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex, we may extend this period by up to two additional months, and we will inform you of any such extension.

Data Transfers

Your personal data is stored and processed within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

Data Protection Officer

For GDPR-related enquiries, please contact our data protection team at [email protected].

Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Information

We may update this GDPR information periodically to reflect changes in our practices or legal requirements. The latest version will always be available on this page.