Our Commitment to GDPR
Ink-comet is committed to ensuring compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take the protection of your personal data seriously and have implemented measures to ensure your rights are respected.
Data Controller
Ink-comet acts as the data controller for personal information collected through this website. As the data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection laws.
Contact details:
Email: [email protected]
Address: 47 Commerce Road, London, EC2A 4PQ, United Kingdom
Your Rights Under GDPR
The GDPR provides you with the following rights regarding your personal data:
Right to Be Informed
You have the right to be informed about how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR page.
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request, free of charge in most circumstances.
Right to Rectification
You have the right to request that we correct any inaccurate personal data we hold about you. We will make the necessary corrections within one month of receiving your request.
Right to Erasure
Also known as the "right to be forgotten", you can request that we delete your personal data when:
- The data is no longer necessary for the purpose it was collected
- You withdraw your consent and there is no other legal basis for processing
- You object to the processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
- The data must be erased to comply with a legal obligation
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another controller where technically feasible.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes. We will stop processing your data unless we can demonstrate compelling legitimate grounds.
Rights Related to Automated Decision Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not currently use automated decision-making processes.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by two further months, in which case we will inform you of the extension and the reasons for it.
We may need to verify your identity before processing your request. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.
Lawful Basis for Processing
We only process personal data when we have a lawful basis to do so. The lawful bases we rely on include:
- Consent: You have given clear consent for us to process your personal data for a specific purpose
- Contract: Processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract
- Legal Obligation: Processing is necessary for us to comply with the law
- Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests
Data Protection Measures
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data where appropriate
- Regular testing and evaluation of the effectiveness of security measures
- Staff training on data protection
- Access controls to limit who can access personal data
- Procedures for handling data breaches
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Supervisory Authority
If you are not satisfied with our response to your request or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.