GDPR Compliance

assispatte is committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle your data in accordance with these regulations.

Data Controller

assispatte acts as the data controller for personal information collected through this website and in connection with our services. As data controller, we determine the purposes and means of processing your personal data.

Data Controller Contact:
assispatte
27 Hartwell Crescent
London, SW11 4PR
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data only where we have a lawful basis to do so. Our processing activities are based on:

• Performance of a contract: When you book a programme or service, we process your data to fulfil our contractual obligations
• Legitimate interests: We may process data for business purposes such as improving our services, provided this does not override your fundamental rights
• Consent: For marketing communications and certain non-essential cookies, we obtain your explicit consent
• Legal obligation: We may process data where required to comply with legal requirements

Your Data Protection Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your data in certain circumstances
• Right to restrict processing: You can request that we limit how we use your data
• Right to data portability: You can request your data in a structured, machine-readable format
• Right to object: You can object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making: You have rights concerning automated decisions that significantly affect you

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.

We do not charge a fee for responding to requests unless the request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee or refuse to act on the request.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest where appropriate
• Regular security assessments and updates
• Access controls limiting data access to authorised personnel
• Staff training on data protection and security

International Transfers

Your personal data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or binding corporate rules.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

We encourage you to contact us first so we can try to resolve your concerns directly.

Last updated: January 2024