GDPR Compliance

General Data Protection Regulation

Edge-blossom is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the United Kingdom and European Union.

Data Controller

Edge-blossom acts as the data controller for the personal information we collect and process. We determine the purposes and means of processing your personal data.

Edge-blossom
127 Kensington Church Street
London, W8 7LP
United Kingdom
[email protected]

Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

1. Right to be Informed

You have the right to be informed about the collection and use of your personal data. This is outlined in our Privacy Policy.

2. Right of Access

You have the right to request access to your personal data and obtain confirmation of whether we are processing your data. You may request:

• What personal data we hold about you
• Why we are processing it
• Who has access to it
• How long we will retain it

3. Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. We will respond to your request within one month.

4. Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent
• You object to the processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased for compliance with legal obligations

5. Right to Restriction of Processing

You have the right to request restriction of processing your personal data when:

• You contest the accuracy of the data
• The processing is unlawful but you prefer restriction over erasure
• We no longer need the data but you require it for legal claims
• You have objected to processing pending verification

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.

7. Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

8. Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significant effects.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

[email protected]

When making a request, please include:

• Your full name
• Contact information
• Description of your request
• Proof of identity (if required)

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of any such extension.

Lawful Basis for Processing

We process your personal data only when we have a lawful basis to do so:

• Consent: You have explicitly agreed to the processing
• Contract: Processing is necessary to fulfill contractual obligations
• Legal Obligation: Processing is required by law
• Vital Interests: Processing is necessary to protect life
• Public Task: Processing is necessary for tasks carried out in the public interest
• Legitimate Interests: Processing is necessary for our legitimate business interests

Data Protection Principles

We adhere to the following data protection principles:

• Lawfulness, Fairness, and Transparency: Processing is lawful, fair, and transparent
• Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes
• Data Minimization: We collect only necessary data
• Accuracy: Data is accurate and kept up to date
• Storage Limitation: Data is retained only as long as necessary
• Integrity and Confidentiality: Data is processed securely
• Accountability: We are responsible for compliance and can demonstrate it

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Incident response procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours
• Notify affected individuals without undue delay if there is a high risk
• Document the breach and our response

International Data Transfers

When transferring personal data outside the UK or EU, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions
• Binding Corporate Rules

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. In the United Kingdom, the supervisory authority is:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.

Contact Information

For any questions regarding GDPR compliance or to exercise your rights, please contact:

Data Protection Officer
Edge-blossom
127 Kensington Church Street
London, W8 7LP
United Kingdom
[email protected]