GDPR Compliance

Our Commitment to GDPR

Geyser-ware is committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. This document outlines how we process personal data in accordance with these requirements.

Data Controller

Geyser-ware acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you submit an enquiry form, you provide explicit consent for us to process your information to respond to your request.
• Legitimate Interests: We may process data where necessary for our legitimate business interests, such as improving our services, provided this does not override your rights and freedoms.
• Legal Obligation: We may process data to comply with legal requirements, such as record-keeping obligations.

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format.

Right to Rectification

If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You may object to our processing of your personal data where we rely on legitimate interests as our legal basis.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by two additional months in complex cases.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

We do not transfer personal data outside the United Kingdom. Should this change in the future, we will ensure appropriate safeguards are in place.

Data Protection Officer

For questions about data protection or to exercise your GDPR rights, contact [email protected].

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data appropriately. Visit ico.org.uk for more information.