Our commitment to protecting your personal data under the General Data Protection Regulation.
Last updated: January 2024
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on 25 May 2018. It gives individuals greater control over their personal data and imposes strict obligations on organisations that collect, process, or store personal information.
wind-gate is committed to full compliance with GDPR requirements and to protecting the privacy rights of all individuals whose data we process.
wind-gate acts as a data controller for personal information collected through our website and during the provision of our services. As a data controller, we determine the purposes and means of processing personal data.
For any queries relating to data protection or to exercise your rights, please contact:
Data Protection Officer
wind-gate
47 Clerkenwell Road
London EC1M 5RS
United Kingdom
Email: [email protected]
Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:
GDPR provides you with specific rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.
You have the right to request correction of personal data that is inaccurate or incomplete. We will make corrections promptly upon receiving a valid request.
Also known as the "right to be forgotten", you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or when you withdraw consent.
You may request that we limit how we use your data in certain circumstances, such as while we verify the accuracy of data you have challenged.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making of this nature.
To exercise any of your rights under GDPR, please contact our Data Protection Officer using the details above. We may need to verify your identity before processing your request. We will respond to all valid requests within one month, though this may be extended by two further months for complex requests.
There is no fee for exercising your rights in most circumstances. However, we may charge a reasonable fee for manifestly unfounded or excessive requests, or refuse to act on such requests.
We primarily process personal data within the United Kingdom and European Economic Area. Where we transfer data outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or transfers to countries with adequate data protection laws.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you are not satisfied with how we have handled your personal data or responded to your rights request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.