Last Updated: January 2024
GDPR Commitment
Diligent DIY Solutions is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) for all users, regardless of location. This document outlines your rights and our obligations under GDPR.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Consent: For marketing communications and optional services
- Contract: To provide DIY workshops and consultation services
- Legitimate Interest: To improve our services and ensure safety
- Legal Obligation: To comply with business and safety regulations
Your GDPR Rights
Under GDPR, you have the following rights:
Right to Information
You have the right to know what personal data we collect and how we use it.
Right of Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing
You can request that we limit how we use your personal data.
Right to Data Portability
You can request your data in a portable format to transfer to another service.
Right to Object
You can object to processing based on legitimate interests or for marketing purposes.
Rights Related to Automated Decision Making
You have rights regarding automated decision-making and profiling.
Data Protection Measures
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit and at rest
- Regular security audits and vulnerability assessments
- Staff training on data protection principles
- Access controls and authentication procedures
- Regular backups and disaster recovery plans
Data Retention
We retain personal data only as long as necessary for the purposes it was collected:
- Workshop records: 7 years for certification purposes
- Consultation records: 5 years for project support
- Marketing consent: Until withdrawn by user
- Financial records: As required by law
International Transfers
When we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, including:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules where applicable
Data Breach Notification
In the event of a data breach that poses a high risk to your rights and freedoms, we will:
- Notify the relevant supervisory authority within 72 hours
- Notify affected individuals without undue delay
- Document the breach and our response measures
Contact Our Data Protection Officer
For GDPR-related questions or to exercise your rights, contact our Data Protection Officer:
Email: [email protected]
Phone: +1 (512) 555-7891
Address: 2847 Oak Hill Drive, Austin, TX 78704
Supervisory Authority
If you're not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.
