GDPR Compliance

Last updated: August 2024

cosmic-mist is committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page provides information about how we handle your data in accordance with these regulations.

Data Controller

cosmic-mist acts as the data controller for personal information collected through this website. We are responsible for determining the purposes and means of processing your personal data.

Contact details:
cosmic-mist
Wellington Place
Leeds, LS1 4AP
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate interests: Where processing is necessary for our legitimate interests, provided these do not override your fundamental rights and freedoms.
• Legal obligation: Where processing is necessary to comply with a legal obligation.

Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

You have the right to request that we correct any inaccurate personal data we hold about you.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision Making

You have rights related to automated decision-making and profiling. We do not currently make decisions based solely on automated processing that produce legal effects concerning you.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular assessment and evaluation of security measures
• Access controls limiting who can access personal data
• Staff training on data protection

Data Transfers

We primarily process your data within the United Kingdom and the European Economic Area. If we transfer your data outside these areas, we ensure appropriate safeguards are in place to protect your data.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods vary depending on the type of data and the purpose of processing. When data is no longer needed, it is securely deleted or anonymised.

Complaints

If you have concerns about how we handle your personal data, please contact us first so we can address your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk

Updates

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.