Information presented on this website is promotional in nature

Last updated: January 2024

Our Commitment to Data Protection

solar-pine is committed to ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of personal data seriously and have implemented measures to ensure that all personal information is processed lawfully, fairly, and transparently.

Data Controller Information

solar-pine acts as the data controller for personal information collected through this website. Our contact details are:

Address: 47 Whitmore Street, London EC2A 4BH, United Kingdom
Email: [email protected]

Principles of Data Processing

We adhere to the core principles of the UK GDPR in all our data processing activities:

Lawfulness, Fairness, and Transparency

We only process personal data where we have a lawful basis to do so, and we are transparent about how we use your information. Our Privacy Policy provides comprehensive details about our data processing activities.

Purpose Limitation

Personal data is collected for specified, explicit, and legitimate purposes. We do not process data in ways that are incompatible with those purposes without obtaining additional consent.

Data Minimisation

We only collect personal data that is necessary for the purposes for which it is processed. We regularly review our data collection practices to ensure we are not collecting excessive information.

Accuracy

We take reasonable steps to ensure that personal data is accurate and kept up to date. You can contact us at any time to update or correct your information.

Storage Limitation

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. We have implemented data retention schedules to ensure timely deletion of data that is no longer needed.

Integrity and Confidentiality

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

Your Rights Under UK GDPR

As a data subject, you have the following rights regarding your personal data:

Right to Be Informed

You have the right to be informed about how we collect and use your personal data. This information is provided through our Privacy Policy and any specific notices provided at the point of data collection.

Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to such requests within one month.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will make corrections within one month of receiving your request.

Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data. This right is not absolute and applies only in specific situations as defined by the UK GDPR.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests, direct marketing, and processing for research or statistical purposes.

Rights Related to Automated Decision-Making

You have rights relating to automated decision-making and profiling. We do not currently engage in solely automated decision-making that has legal or similarly significant effects.

Exercising Your Rights

To exercise any of your rights under the UK GDPR, please contact us using the details provided. We may ask you to verify your identity before processing your request. We aim to respond to all valid requests within one month, though this may be extended by two months where requests are complex or numerous.

Data Protection Impact Assessments

Where required, we conduct Data Protection Impact Assessments (DPIAs) before undertaking processing that is likely to result in a high risk to individuals' rights and freedoms.

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

Complaints

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.