GDPR Compliance
Your data protection rights under the General Data Protection Regulation
Our Commitment to GDPR
imbamevert is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page explains your rights under GDPR and how we comply with these regulations.
Legal Basis for Processing
We process personal data under the following legal bases:
Consent
When you voluntarily provide information through forms or enrollment, you give explicit consent for us to process that data for specified purposes. You may withdraw consent at any time.
Contractual Necessity
Processing is necessary to fulfill our contractual obligations when you enroll in programs or request services.
Legitimate Interests
We process certain data based on legitimate business interests, such as improving services, preventing fraud, and ensuring website security. These interests are balanced against your rights and freedoms.
Legal Obligations
We process data when required to comply with legal obligations, such as tax laws and regulatory requirements.
Your GDPR Rights
Right to Access
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a structured, commonly used format.
Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to request correction or completion of that information.
Right to Erasure
Also known as the "right to be forgotten," you may request deletion of your personal data when:
- The data is no longer necessary for the purpose it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
- Deletion is required for compliance with legal obligations
Right to Restriction of Processing
You may request restriction of processing when:
- You contest the accuracy of personal data
- Processing is unlawful but you prefer restriction over erasure
- We no longer need the data but you require it for legal claims
- You have objected to processing pending verification of legitimate grounds
Right to Data Portability
You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another controller without hindrance.
Right to Object
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights. In the UK, the supervisory authority is the Information Commissioner's Office (ICO).
How to Exercise Your Rights
To exercise any of these rights, contact us at [email protected] with:
- Your full name
- The email address associated with your account or enrollment
- A clear description of your request
- Verification of your identity (for security purposes)
We will respond to your request within 30 days. In complex cases, this period may be extended by an additional 60 days, and we will inform you of the extension and reasons.
Data Protection Principles
We adhere to GDPR's core data protection principles:
Lawfulness, Fairness, and Transparency
We process data lawfully, fairly, and in a transparent manner. Our Privacy Policy and this page explain our processing activities clearly.
Purpose Limitation
We collect data for specified, explicit, and legitimate purposes and do not process it in ways incompatible with those purposes.
Data Minimization
We collect only data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
Accuracy
We take reasonable steps to ensure personal data is accurate and kept up to date. Inaccurate data is erased or rectified promptly.
Storage Limitation
We retain personal data only for as long as necessary for the purposes for which it was collected or as required by law.
Integrity and Confidentiality
We implement appropriate security measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Accountability
We are responsible for and can demonstrate compliance with GDPR principles through documentation, policies, and procedures.
Data Processing Activities
We maintain records of our data processing activities, including:
- Purposes of processing
- Categories of data subjects and personal data
- Categories of recipients of personal data
- Data retention periods
- Security measures in place
International Data Transfers
If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses approved by the European Commission
- Transfer to countries with adequacy decisions
- Other legally approved transfer mechanisms
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will:
- Notify the relevant supervisory authority within 72 hours of becoming aware of the breach
- Inform affected individuals without undue delay if the breach poses a high risk
- Document the breach, its effects, and remedial actions taken
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.
Children's Data
Our services are not directed at children under 16 years of age. We do not knowingly collect or process personal data from children. If we become aware of such processing, we will delete the data immediately.
Data Protection Officer
For specific questions about data protection, you may contact our Data Protection Officer at [email protected].
Updates to This Page
We may update this GDPR compliance information to reflect changes in our practices or legal requirements. Updates will be posted with a revision date.
Contact and Complaints
For GDPR-related inquiries or concerns:
Email: [email protected]
Address: 47 Kelvin Drive, Manchester M15 6AR, United Kingdom
If you are not satisfied with our response, you may lodge a complaint with:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113