Last Updated: 30 September 2024
dimfjord is committed to complying with the General Data Protection Regulation (GDPR) and UK data protection laws. This page outlines how we protect your rights as a data subject and our obligations as a data controller.
dimfjord acts as the data controller for personal information collected through our website and educational services.
Contact:
dimfjord
127 Dale Street
Liverpool L2 2JH
United Kingdom
Email: [email protected]
Under GDPR, you have the following rights:
You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.
You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.
You have the right to request erasure of your personal data under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request restriction of processing of your personal data under certain conditions.
You have the right to object to our processing of your personal data under certain conditions, particularly for direct marketing purposes.
You have the right to request transfer of your data to another organization or directly to you under certain conditions.
Where processing is based on consent, you have the right to withdraw your consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.
To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month of receipt. If your request is complex or we receive multiple requests, we may extend this period by two additional months, and we will inform you of such extension.
We process personal data based on the following lawful bases:
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required by law.
We primarily process data within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates data protection laws.
In the United Kingdom, the supervisory authority is:
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
We conduct data protection impact assessments for processing activities that are likely to result in high risks to your rights and freedoms, ensuring appropriate measures are implemented to mitigate those risks.
We may update our GDPR compliance information to reflect changes in our practices or applicable law. We encourage you to review this page periodically.