Our Commitment to GDPR
Base-tundra is committed to protecting the personal data of our customers and website visitors in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with these regulations and your rights under them.
Data Controller Information
Base-tundra acts as the data controller for the personal data we collect. Our contact details are:
Base-tundra
27 Finsbury Square
London, EC2A 1PL
United Kingdom
Email: [email protected]
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Contract: Processing necessary for the performance of our services to you
- Legitimate interests: Processing necessary for our legitimate business interests, such as fraud prevention and service improvement
- Consent: Where you have given explicit consent for specific processing activities, such as marketing communications
- Legal obligation: Processing necessary to comply with legal requirements
Your Data Protection Rights
Under the UK GDPR, you have the following rights:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will respond to your request within one month of receiving it. There is no fee for this service in most circumstances.
Right to Rectification
You have the right to request that we correct any personal data that is inaccurate or incomplete. We will respond within one month.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, including:
- When the data is no longer necessary for the purpose it was collected
- When you withdraw consent (where consent was the lawful basis)
- When you object to processing and there are no overriding legitimate grounds
- When the data has been unlawfully processed
Right to Restrict Processing
You have the right to request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer this data directly to another organisation where technically feasible.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes. We will stop processing upon your objection unless we have compelling legitimate grounds.
Rights Related to Automated Decision Making
You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. Our fraud detection systems include appropriate safeguards and human oversight.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to all legitimate requests within one month.
Data Security Measures
We implement robust technical and organisational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Access controls and authentication procedures
- Regular security assessments and audits
- Staff training on data protection
- Incident response procedures
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where the breach poses a high risk, we will also notify you directly.
International Data Transfers
When we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK government or adequacy decisions.
Complaints
If you are not satisfied with how we handle your personal data or our response to a request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.