Your rights under the General Data Protection Regulation
The General Data Protection Regulation (GDPR) gives you control over how your personal data is used. This page explains your rights and how to exercise them.
The General Data Protection Regulation (GDPR) is a European Union regulation that came into effect on 25 May 2018. It strengthens data protection for individuals within the EU and European Economic Area (EEA), and applies to any organisation that processes personal data of EU/EEA residents, regardless of where the organisation is based.
Under GDPR, you have the following rights regarding your personal data:
You have the right to know what data we collect, why we collect it, how long we keep it, and who we share it with. This information is provided in our Privacy Policy.
You can request a copy of all personal data we hold about you. This includes information about how we process your data. We will respond to your request within one month.
If the data we hold about you is inaccurate or incomplete, you can request that we correct it. We will respond within one month.
In certain circumstances, you can request that we delete your personal data. This applies when:
You can request that we limit how we use your data while we investigate a concern you have about how we process it. During this time, we can store the data but not use it.
You can request a copy of your personal data in a structured, machine-readable format. You also have the right to request that we transmit this data to another organisation.
You can object to the processing of your personal data in certain circumstances, including direct marketing. If you object to processing for direct marketing purposes, we must stop.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. You can request human intervention, express your point of view, and contest the decision.
To exercise any of your rights under GDPR, please contact us using the details below. We will need to verify your identity before processing your request.
Email: info@design-fly.co.uk
Post: Design Fly Media Ltd, 2a Derby Road, Ashby-de-la-Zouch, Leicestershire, LE65 2HE
We aim to respond to all requests within one month. Complex requests may take longer, in which case we will inform you of the delay.
When you make a data subject request, we may ask for:
This helps us verify your identity and respond accurately to your request.
Under GDPR, we must have a legal basis for processing personal data. Our legal bases are:
We only keep personal data for as long as necessary to fulfil the purpose for which it was collected. After that, it is securely deleted or anonymised. Our retention periods consider:
If we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as:
If you are unhappy with how we have handled your personal data or responded to a data subject request, you have the right to complain to a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk
We may update this page from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.
If you have any questions about how we handle your personal data under GDPR, please contact us:
Design Fly Media Ltd
2a Derby Road
Ashby-de-la-Zouch
Leicestershire
LE65 2HE
Email: info@design-fly.co.uk