GDPR Compliance

Effective Date: 23 September 2026

1. Our Commitment to GDPR

alpine-savanna is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws.

2. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contractual Necessity: When processing is necessary to fulfill our contractual obligations
• Legitimate Interests: When processing serves our legitimate business interests while respecting your rights
• Legal Obligation: When required by law

3. Data Subject Rights

Under GDPR, you have the following rights:

• Right of Access: Obtain confirmation of whether we process your data and request copies
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing under certain conditions
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Rights Related to Automated Decision-Making: We do not engage in automated decision-making with legal effects

4. Data Protection Officer

For inquiries regarding data protection or to exercise your rights, contact us at:

Email: [email protected]

5. Data Security Measures

We implement appropriate technical and organisational measures including:

• Encryption of data in transit and at rest
• Access controls and authentication protocols
• Regular security assessments
• Staff training on data protection

6. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

7. International Data Transfers

We process data primarily within the United Kingdom. Any international transfers comply with GDPR requirements through appropriate safeguards.

8. Children's Data

Our services are not directed at individuals under 16 years of age. We do not knowingly collect data from children.

9. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk

10. Updates to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements.