What is GDPR?
GDPR (General Data Protection Regulation) is the EU's data protection regulation that came into force on May 25, 2018. The regulation aims to give individuals greater control over their personal data and sets requirements for how organizations collect, store, and use personal data.
At brook-dolphin, we take data protection very seriously and work continuously to ensure that our handling of personal data meets the requirements of the GDPR.
Your rights under the GDPR
As a data subject, you have several rights regarding your personal data:
Right to information
You have the right to receive clear information about how we process your personal data. This information can be found in our privacy policy.
Right of access
You have the right to request a register extract showing what personal data we have registered about you. We respond to such requests within 30 days.
Right to rectification
If you discover that we have incorrect or incomplete information about you, you have the right to request that this be corrected or supplemented.
Right to erasure
Under certain circumstances, you have the right to request that your personal data be deleted. This applies, for example, if the data is no longer needed for the purposes for which it was collected, or if you withdraw your consent.
Right to restriction of processing
You can request that we restrict the processing of your data, for example while we investigate a complaint from you.
Right to data portability
You have the right to receive the personal data you have provided to us in a structured, machine-readable format and transfer this to another data controller.
Right to object
You have the right to object to processing based on legitimate interest. We must then cease processing unless we can demonstrate compelling legitimate grounds.
Right not to be subject to automated decision-making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.
How to exercise your rights
To exercise any of your rights, contact us at [email protected]. Clearly state which right you want to exercise and include sufficient information for us to verify your identity.
אנहम درخواستوں کا جواب غیر ضروری تاخیر کے بغیر اور زیادہ سے زیادہ 30 دنوں کے اندر دیتے ہیں۔ اگر آپ کی درخواست پیچیدہ ہے یا ہمیں بہت سی درخواستیں موصول ہوئی ہیں تو اس وقت میں مزید 60 دنوں کا اضافہ کیا جا سکتا ہے، ایسی صورت میں ہم آپ کو مطلع کریں گے۔
Our data protection practices
We have implemented the following measures to ensure GDPR compliance:
- Regular reviews of our data management
- Staff training on data protection issues
- Technical security measures such as encryption and access control
- Data processing agreements with all suppliers who process personal data on our behalf
- Clear routines for handling personal data incidents
- Privacy by design in the development of our services
Complaints
If you believe that we are violating the GDPR, you have the right to lodge a complaint with the supervisory authority. In Sweden, this is the Swedish Authority for Privacy Protection (IMY):
Integritetsskyddsmyndigheten (IMY)
Box 8114
104 20 Stockholm
[email protected]
However, we recommend that you contact us first so that we have the opportunity to resolve any issues.
Contact us
If you have questions about the GDPR or our handling of personal data, do not hesitate to contact us:
Brook-dolphin
Kungsgatan 44
111 35 Stockholm
Email: [email protected]