Your rights under the General Data Protection Regulation
Last updated: January 2024
ocean-fable is committed to protecting your personal data and respecting your privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about your rights and how we handle your data.
ocean-fable is the data controller responsible for your personal data. Our contact details are:
ocean-fable
47 Heritage Lane
Bath, BA1 5BN
United Kingdom
Email: [email protected]
We collect and process the following categories of personal data:
We process your personal data under the following lawful bases:
When you book a tour with us, we need to process your personal data to fulfil our contractual obligations to you. This includes processing your name, contact details, and booking information.
We may process your data where it is necessary for our legitimate interests, such as improving our services, ensuring network and information security, and managing our business operations. We always balance our interests against your rights and freedoms.
Where required, we will seek your consent before processing your personal data. You may withdraw consent at any time by contacting us.
We may process your data where necessary to comply with our legal obligations, such as tax record-keeping requirements.
The UK GDPR provides you with the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request." We will respond to your request within one month.
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, including:
You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller where technically feasible.
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis. We must stop processing unless we demonstrate compelling legitimate grounds.
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects. We do not currently make such automated decisions.
To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by up to two months, and we will notify you if this is the case.
We may need to verify your identity before processing your request. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.
We retain your personal data only for as long as necessary for the purposes for which it was collected:
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
Your personal data may be transferred to, and processed in, countries outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authorities.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk
However, we would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us in the first instance.
We may update this GDPR notice from time to time. Any changes will be posted on this page with an updated revision date.