Advertising Content Specialist Geographic Services Across the UK

GDPR Compliance

Home / GDPR

Our Commitment to Data Protection

branch-elk is committed to ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we handle your personal data and your rights under data protection legislation.

Data Controller

branch-elk acts as the data controller for personal information collected through this website and in connection with our geographic consultancy services. Our contact details are:

branch-elk
47 Cartographer House
Bristol, BS1 4QA
United Kingdom

Email: [email protected]

Lawful Bases for Processing

We process personal data under the following lawful bases as defined by UK GDPR:

  • Article 6(1)(a) Consent: Where you have provided clear consent for us to process your data for specific purposes, such as receiving project updates.
  • Article 6(1)(b) Contract: Where processing is necessary for performing a contract with you or taking steps prior to entering a contract.
  • Article 6(1)(f) Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms.

Your Rights Under UK GDPR

As a data subject, you have the following rights:

  • Right of Access (Article 15): You may request a copy of the personal data we hold about you.
  • Right to Rectification (Article 16): You may request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Article 17): You may request deletion of your personal data in certain circumstances.
  • Right to Restriction (Article 18): You may request restriction of processing in certain circumstances.
  • Right to Data Portability (Article 20): You may request transfer of your data to another organisation in a structured format.
  • Right to Object (Article 21): You may object to processing based on legitimate interests or for direct marketing.
  • Rights Related to Automated Decision-Making (Article 22): You have rights regarding automated decisions that significantly affect you.

Exercising Your Rights

To exercise any of your data protection rights, please submit a request in writing to our postal address or email. We will respond to your request within one month of receipt. If your request is complex or we receive multiple requests, we may extend this period by up to two months, notifying you of any extension within the initial month.

Data Subjects Access Requests

You may submit a Subject Access Request (SAR) to obtain a copy of the personal data we process about you. To verify your identity, we may request additional information before fulfilling your request. There is no charge for standard requests, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

Data Protection Principles

We adhere to the data protection principles set out in UK GDPR:

  • Lawfulness, fairness, and transparency
  • Purpose limitation
  • Data minimisation
  • Accuracy
  • Storage limitation
  • Integrity and confidentiality
  • Accountability

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and inform the Information Commissioner's Office within 72 hours of becoming aware of the breach.

Supervisory Authority

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow, SK9 5AF
United Kingdom

Website: ico.org.uk

Updates to This Notice

This GDPR compliance notice may be updated periodically. The current version will always be available on this page with the date of last revision.

Last updated: January 2024