GDPR Information

Last updated: November 2024

About UK GDPR

The UK General Data Protection Regulation (UK GDPR) provides individuals with specific rights regarding their personal data. This page explains these rights and how Sostaritro complies with data protection requirements.

Data Controller

Sostaritro acts as the data controller for personal information collected through this website and our services. This means we determine how and why your personal data is processed.

Contact details:
Sostaritro
47 Commerce Street
London EC2A 3QP
[email protected]

Your Data Protection Rights

Right to Be Informed

You have the right to be informed about how we collect and use your personal data. We provide this information through our Privacy Policy and this GDPR information page.

Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.

Right to Rectification

You have the right to request that we correct any personal data that is inaccurate or incomplete. We will respond to such requests within one month.

Right to Erasure

Also known as the "right to be forgotten," you may request that we delete your personal data in certain circumstances, including:

• The data is no longer necessary for its original purpose
• You withdraw consent (where consent was the basis for processing)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

This right is not absolute and may be subject to legal retention requirements.

Right to Restrict Processing

You may request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making in our services.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract: Processing necessary to provide services you have requested
• Legitimate Interests: Processing necessary for our business operations, provided it does not override your fundamental rights
• Legal Obligation: Processing required to comply with the law
• Consent: Where you have provided specific consent for particular processing activities

Data Protection Principles

We adhere to the following data protection principles:

• Processing data lawfully, fairly, and transparently
• Collecting data only for specified, explicit, and legitimate purposes
• Ensuring data is adequate, relevant, and limited to what is necessary
• Keeping data accurate and up to date
• Retaining data only as long as necessary
• Processing data securely with appropriate measures

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. Include sufficient information to verify your identity and specify which right you wish to exercise.

We will respond to valid requests within one month. This period may be extended by two further months where requests are complex or numerous, in which case we will inform you within the first month.

There is no fee for making a request unless the request is manifestly unfounded or excessive.

Complaints

If you are dissatisfied with how we handle your personal data, you may lodge a complaint with us directly. If you remain unsatisfied, you have the right to complain to the Information Commissioner's Office (ICO).

The ICO can be contacted through their website at ico.org.uk or by post at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Updates to This Information

We may update this GDPR information periodically. Significant changes will be communicated through our website. We recommend reviewing this page regularly.