GDPR Compliance

Last Updated: January 2024

This page provides information about how crag-gate complies with the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA).

Data Controller

crag-gate acts as the data controller for personal information collected through this website and in the course of providing our services. Our contact details are:

crag-gate
42 Kloof Street, Gardens
Cape Town, 8001
South Africa
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit an enquiry form or subscribe to communications, you consent to our processing of your data for those purposes.
• Contract: Processing necessary to fulfil our contractual obligations when you engage our event planning services.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and marketing, provided these interests do not override your rights.
• Legal Obligation: Processing required to comply with applicable laws and regulations.

Your Rights Under GDPR

If you are located in the EEA, you have the following rights:

Right of Access

You have the right to request a copy of the personal information we hold about you.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information.

Right to Erasure

You have the right to request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal information in certain circumstances.

Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

International Data Transfers

As we are based in South Africa, your personal information may be transferred to and processed in South Africa. When we transfer data outside the EEA, we ensure appropriate safeguards are in place to protect your information, including standard contractual clauses approved by the European Commission.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected. The retention period varies depending on the nature of the information and our legal obligations. You may request information about specific retention periods by contacting us.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

Complaints

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with your local data protection supervisory authority.