GDPR Compliance

Our Commitment to GDPR

dapper-trek is committed to protecting the privacy and personal data of all individuals in accordance with the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements and what rights you have regarding your personal data.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual Necessity: Processing necessary to fulfill our educational services contract with you
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services
• Consent: Processing based on your explicit consent for specific purposes, such as marketing communications
• Legal Obligation: Processing required to comply with legal requirements

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within one month of your request.

Right to Rectification

If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data when:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction of Processing

You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes at any time.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Address: 47 Wellington Street, Covent Garden, London, WC2E 7BD, United Kingdom

We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months, and we will inform you of any such extension.

Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact our Data Protection Officer at [email protected].

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Staff training on data protection principles
• Incident response procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

When we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions for certain countries
• Other legally recognized transfer mechanisms

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Specific retention periods include:

• Course enrollment data: Duration of course plus 7 years for financial records
• Account information: Until account deletion is requested
• Marketing communications: Until consent is withdrawn
• Website analytics: 26 months

Children's Data

We do not knowingly process personal data of individuals under 16 years of age without parental consent, in compliance with GDPR requirements.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Policy

We may update our GDPR compliance information as regulations evolve or our practices change. Significant updates will be communicated through our website and via email to enrolled students.