Our Commitment to GDPR
cioppshriv is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we comply with these regulations and explains your rights as a data subject.
Data Controller Information
cioppshriv acts as the data controller for the personal information we collect through our website and services. Our contact details are:
cioppshriv
42 Research Avenue
Cambridge, CB2 1TN
United Kingdom
Email: [email protected]
Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal information we hold about you. This is commonly known as a "subject access request". We will respond to such requests within one month of receipt.
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. We will take reasonable steps to verify the accuracy of the corrected information.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, including when:
- The data is no longer necessary for the purpose for which it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.
Right to Object
You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis, or where we process data for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not currently use automated decision-making in relation to our services.
How to Exercise Your Rights
To exercise any of these rights, please contact us using the details above. We may need to verify your identity before processing your request. We will respond to your request within one month, though this period may be extended by two further months for complex requests.
We do not charge a fee for handling legitimate requests, unless requests are manifestly unfounded or excessive.
Data Protection Principles
We adhere to the following principles when processing personal data:
- Lawfulness, fairness, and transparency: We process data lawfully, fairly, and in a transparent manner
- Purpose limitation: We collect data for specified, explicit, and legitimate purposes
- Data minimisation: We collect only data that is adequate, relevant, and limited to what is necessary
- Accuracy: We keep personal data accurate and up to date
- Storage limitation: We retain data only for as long as necessary
- Integrity and confidentiality: We process data securely to protect against unauthorised access or loss
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Supervisory Authority
You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates the GDPR. In the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom
Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.