GDPR Compliance Statement

Our Commitment to Data Protection

crater-beacon is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we comply with these regulations and your rights as a data subject.

Data Controller Information

crater-beacon acts as the data controller for personal information collected through our website and services. We are responsible for ensuring your data is processed lawfully, fairly, and transparently.

Contact: [email protected]

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: Processing necessary to fulfill our educational services
• Consent: Where you have given explicit permission for specific processing activities
• Legitimate Interests: For improving our services and communicating about relevant courses
• Legal Obligation: Where required by law

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

Under certain circumstances, you can request deletion of your personal data.

Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations.

Right to Data Portability

You can request transfer of your data to another organization in a structured, commonly used format.

Right to Object

You can object to processing of your personal data where we rely on legitimate interests as our legal basis.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by an additional two months and will notify you of such extension.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Course enrollment data is typically retained for seven years for regulatory and educational record purposes.

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection principles
• Incident response procedures

International Data Transfers

Your personal data is stored and processed within the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire
SK9 5AF
Website: ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Significant updates will be communicated through our website.

Questions and Concerns

If you have questions about our GDPR compliance or data protection practices, please contact us at [email protected].