Our Commitment to Data Protection
witty-dune is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of protecting personal data and upholding individuals' rights regarding their information.
Data Controller
witty-dune acts as the data controller for personal information collected through our website and in the course of providing vehicle hire services. This means we determine the purposes and means of processing personal data.
Contact details:
witty-dune
47 Kensington Court
London W8 5DA
United Kingdom
Email: [email protected]
Principles We Follow
We adhere to the data protection principles set out in the UK GDPR:
- Lawfulness, fairness and transparency: We process data lawfully and are transparent about how we use it
- Purpose limitation: Data is collected for specified, explicit purposes and not processed incompatibly
- Data minimisation: We collect only data that is necessary for our purposes
- Accuracy: We take reasonable steps to ensure data is accurate and up to date
- Storage limitation: Data is kept only as long as necessary
- Integrity and confidentiality: We implement appropriate security measures
- Accountability: We can demonstrate compliance with these principles
Your Rights Under UK GDPR
As a data subject, you have the following rights:
Right to Be Informed
You have the right to know how your personal data is being collected and used. Our Privacy Policy provides this information.
Right of Access
You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
Right to Rectification
If you believe the personal data we hold about you is inaccurate or incomplete, you can request that we correct or complete it.
Right to Erasure
Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, such as when:
- The data is no longer necessary for its original purpose
- You withdraw consent (where consent was the legal basis)
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restrict Processing
You can request that we limit how we use your data in certain situations, such as while we verify the accuracy of contested data.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used, machine-readable format.
Right to Object
You can object to processing based on legitimate interests, including profiling. You also have an absolute right to object to direct marketing.
Rights Related to Automated Decision Making
You have rights regarding decisions made solely by automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
Exercising Your Rights
To exercise any of these rights, please contact us using the details above. We may need to verify your identity before processing your request. There is generally no fee, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
Data Processing Records
We maintain records of our processing activities as required by Article 30 of the UK GDPR. These records include details of the categories of data processed, purposes, recipients, and retention periods.
Data Protection Impact Assessments
Where processing is likely to result in high risk to individuals' rights and freedoms, we conduct Data Protection Impact Assessments to identify and mitigate those risks.
Data Breaches
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
Complaints
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR information periodically. Please check this page regularly to stay informed about our data protection practices.