GDPR Compliance
Our commitment to data protection under the General Data Protection Regulation.
Last updated: November 2024
Our Commitment to GDPR
Spark-oak is committed to ensuring compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take your privacy seriously and have implemented measures to protect your personal data in accordance with these regulations.
Data Controller Information
For the purposes of GDPR, Spark-oak acts as the data controller for personal information collected through our website and services. Our contact details are:
Spark-oak
47 Clerkenwell Road
London, EC1M 5RS
United Kingdom
Email: [email protected]
Lawful Basis for Processing
We process personal data under the following lawful bases as defined by GDPR:
- Consent: When you submit an enquiry form or subscribe to communications, you provide consent for us to process your data for stated purposes.
- Contract: When you book a programme, we process your data as necessary to fulfil our contractual obligations.
- Legitimate interests: We may process data when it is in our legitimate business interests, provided this does not override your rights and freedoms.
- Legal obligation: We may process data when required to comply with legal requirements.
Your Rights Under GDPR
Under GDPR, you have the following rights concerning your personal data:
Right of Access
You have the right to request a copy of the personal information we hold about you. We will provide this information within one month of your request.
Right to Rectification
If you believe any information we hold about you is inaccurate or incomplete, you have the right to request that we correct it.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.
Right to Restrict Processing
You have the right to request that we limit how we use your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by two additional months if necessary, and we will inform you of any such extension.
We may need to verify your identity before processing your request. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
Data Transfers
We primarily store and process data within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authorities.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
Data Protection Officer
Given the nature and scale of our operations, we have not appointed a dedicated Data Protection Officer. However, our management team is responsible for ensuring compliance with data protection obligations. For any data protection matters, please contact us at [email protected].
Complaints
If you are not satisfied with how we handle your personal data or your rights requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR information page from time to time. Any changes will be posted here with an updated revision date.