Privacy and Policy

PROCESSING BASED ON THE LEGITIMATE INTEREST OF THE OPERATOR:

On the basis of legitimate interest, we are authorized to process personal data for identification and verification of identity when ordering a lecture. On this legal basis, we can also process personal data in debt recovery or in the event of legal disputes.

WHO HAS ACCESS TO YOUR PERSONAL DATA?

We use the services of external intermediaries and third parties, such as IT management, information system management, debt recovery, legal representation in legal disputes, and selection procedures. We ensure that all suppliers act in accordance with applicable laws, are bound by confidentiality, and process your data only to the extent covered by the contracts and adequately protected in accordance with GDPR requirements and international standards.

HOW LONG WILL WE RETAIN YOUR PERSONAL DATA?

We will retain your personal data for the duration of the contract and for the period of time determined by law for their archiving or for the time necessary to achieve the purpose. Personal data processed for the purposes of legitimate interest are processed only to the extent necessary to fulfill the purpose.

RIGHT TO ERASURE (RIGHT TO BE FORGOTTEN):

The operator is obliged to erase personal data concerning the data subject without undue delay if:

• personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
• the data subject withdraws consent on the basis of which processing is carried out,
• there is no other legal basis for processing personal data,
• the data subject objects to processing and there are no overriding legitimate reasons for processing,
• the data subject objects to processing and personal data are processed unlawfully,
• the personal data must be erased to fulfill a legal obligation under EU law or the law of a Member State to which the operator is subject,
• the personal data must be erased to comply with a legal obligation under Union or Member State law to which the controller is subject,
• the personal data were obtained in relation to the offer of information society services.

The data subject may also request erasure if their data is processed unlawfully and unlawfully in connection with the GDPR.

The controller does not apply the right to erasure if processing is necessary:

• To exercise the right of freedom of expression and information,
• To comply with a legal obligation,
• For the performance of a task carried out in the public interest,
• For reasons of public interest in the area of public health,
• For archival purposes in the public interest, scientific or historical research purposes, or statistical purposes,
• For the establishment, exercise, or defense of legal claims.

Right to Restriction of Processing of Personal Data:

The data subject has the right to request the controller to restrict the processing of their personal data in the following cases:

• The data subject disputes the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data,
• The processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead,
• The controller no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise, or defense of legal claims,
• The data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

When processing is restricted, such personal data shall, with the exception of storage, only be processed:

• With the data subject's consent,
• For the establishment, exercise, or defense of legal claims,
• For the protection of the rights of another natural or legal person, or
• For reasons of important public interest of the Union or of a Member State.

Right to Data Portability:

The data subject has the right to receive the personal data concerning them, which they have provided to the controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller.

Who to Contact Regarding the Processing of Your Personal Data?

If you have any questions or concerns regarding the processing of your personal data, please contact us first at: info@fly4tattoo.uk . You have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your rights have been violated.