GDPR Compliance

Our Commitment to Data Protection

link-mountain is committed to ensuring that your personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about how we comply with these regulations and your rights under them.

Data Controller Information

For the purposes of data protection legislation, link-mountain is the data controller. Our contact details are:

Your Rights Under GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal information we hold about you. This is known as a Subject Access Request (SAR). We will respond to valid requests within one month.

Right to Rectification

If you believe that any information we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. We will respond to your request within one month.

Right to Erasure

Also known as the 'right to be forgotten', you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or when you withdraw consent.

Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of data or object to our processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us using the details provided above. When making a request, please provide:

• Your full name and contact details
• A description of the right you wish to exercise
• Any relevant details that will help us identify your data

We may need to verify your identity before processing your request. We will respond to all valid requests within one month, though this period may be extended by two months for complex requests.

Lawful Bases for Processing

We process personal data on the following lawful bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal Obligation: Where processing is necessary for compliance with a legal obligation
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests

International Data Transfers

When arranging travel to destinations outside the United Kingdom, we may need to transfer your personal data to travel suppliers in those countries. Where we transfer data outside the UK, we ensure appropriate safeguards are in place, such as:

• Transfers to countries deemed to have adequate data protection by UK authorities
• Use of standard contractual clauses approved by the ICO
• Other appropriate safeguards as required by law

Data Breach Procedures

We maintain robust procedures for detecting, reporting, and investigating personal data breaches. In the event of a breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.

Complaints

If you are dissatisfied with how we have handled your personal data or any privacy query, you have the right to lodge a complaint with the Information Commissioner's Office:

We encourage you to contact us first so we can attempt to resolve any concerns directly.