Last updated: November 2024
Infurgrech is committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This document outlines how we meet our obligations under these regulations.
We process personal data under the following legal bases:
Infurgrech acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing your personal data.
Data Controller: Infurgrech Route DesignWe collect and process the following categories of personal data:
You have the right to clear, transparent information about how we use your personal data. This information is provided through our Privacy Policy and this GDPR Compliance document.
You can request a copy of all personal data we hold about you. We will provide this information within one month of your request, free of charge in most circumstances.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that information.
Under certain circumstances, you have the right to request deletion of your personal data. This right applies when:
You can request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis. You can also object to direct marketing at any time.
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of your rights under GDPR, send a written request to [email protected]. Please include:
We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will notify you of any delay.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
We primarily store and process data within the United Kingdom and European Economic Area. If we transfer data internationally, we ensure appropriate safeguards are in place through standard contractual clauses or adequacy decisions.
We implement appropriate technical and organisational measures to protect personal data:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you without undue delay and no later than 72 hours after becoming aware of the breach. We will also notify the relevant supervisory authority as required.
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, contact us immediately so we can delete it.
We work with carefully selected third-party service providers who process data on our behalf. All processors are bound by data processing agreements that ensure GDPR compliance and appropriate security measures.
If you have concerns about how we handle your personal data, please contact us first so we can address your concerns. If you remain dissatisfied, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)We review and update this GDPR compliance document regularly to reflect changes in our practices, legal requirements, or regulatory guidance. Significant changes will be communicated to registered users.