Your data protection rights under the General Data Protection Regulation
Last updated: January 2024
frosty-quest is committed to ensuring the security and protection of the personal information that we process, and to providing a compliant and consistent approach to data protection. We have implemented appropriate technical and organisational measures to comply with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
frosty-quest is the data controller responsible for your personal data. If you have any questions about this GDPR information or wish to exercise your data rights, please contact us using the details at the bottom of this page.
The GDPR provides you with certain rights regarding your personal data. These are:
You have the right to be informed about the collection and use of your personal data. This is provided through our Privacy Policy and this GDPR information page.
You have the right to request a copy of the personal information we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.
You have the right to request that we correct any personal information you believe is inaccurate or incomplete. We will respond to your request within one month.
You have the right to request that we delete your personal data in certain circumstances, including:
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller without hindrance, where processing is based on consent or contract and carried out by automated means.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes or processing based on legitimate interests.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. frosty-quest does not currently use automated decision-making in relation to our services.
We process personal data on the following lawful bases:
Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This applies to:
Processing is necessary for our legitimate business interests, where those interests are not overridden by your rights. This applies to:
Processing is necessary to comply with our legal obligations, such as:
Where you have given clear consent for specific processing purposes, such as receiving marketing communications. You can withdraw consent at any time.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
We have procedures in place to detect, report, and investigate personal data breaches. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and will inform affected individuals without undue delay where required.
We primarily store and process data within the United Kingdom and European Economic Area. Where data is transferred outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
We retain personal data only for as long as necessary for the purposes for which it was collected. Our retention periods are:
To exercise any of your GDPR rights, please contact us using the details below. We may need to verify your identity before processing your request. We aim to respond to all valid requests within one month, though this may be extended by two months for complex requests.
There is generally no fee for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
For any questions about this GDPR information or to exercise your data rights, please contact:
Data Protection Contact
frosty-quest
47 Greenway Business Centre
Oakwood Lane
Sheffield S10 4GR
United Kingdom
Email: [email protected]