GDPR Compliance

fjord-saga is committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about our data protection practices and your rights.

Data Controller

fjord-saga acts as the data controller for personal information collected through this website and in the course of providing our environmental consulting services. We determine the purposes and means of processing personal data.

Our Data Protection Principles

We adhere to the following principles when processing personal data:

• Lawfulness, fairness, and transparency: We process data lawfully, fairly, and in a transparent manner
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes
• Data minimisation: We only collect data that is adequate, relevant, and limited to what is necessary
• Accuracy: We keep personal data accurate and up to date
• Storage limitation: We retain data only for as long as necessary
• Integrity and confidentiality: We process data securely with appropriate technical and organisational measures
• Accountability: We demonstrate compliance with these principles

Your Rights Under UK GDPR

Under data protection law, you have the following rights:

Right to Be Informed

You have the right to be informed about how we collect and use your personal data. This is provided through this page and our Privacy Policy.

Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR).

Right to Rectification

You have the right to request that we correct any personal data that is inaccurate or incomplete.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when it is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have rights related to automated decision-making, including profiling. We do not currently use automated decision-making that produces legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us using the details below. We will respond to your request within one month. In complex cases, we may extend this by up to two months, but we will inform you if this is necessary.

We do not charge a fee for processing most requests. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to you, we will also notify you directly.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk

Contact Our Data Protection Lead

For any questions about our data protection practices or to exercise your rights:

fjord-saga
47 Cathedral Quarter
Belfast BT1 2HB
Northern Ireland

Email: [email protected]

Last updated: September 2024