GDPR Compliance
Your data protection rights under the General Data Protection Regulation
Our Commitment to GDPR
Although Brisk-hawk operates primarily in South Africa, we are committed to protecting the privacy of all visitors, including those from the European Economic Area (EEA). We have implemented measures to comply with the General Data Protection Regulation (GDPR) where applicable.
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you submit an enquiry form, you consent to us processing your information to respond to your request.
- Contractual Necessity: When you engage our services, we process your data as necessary to fulfil our contractual obligations.
- Legitimate Interests: We may process data for legitimate business interests, such as improving our website and services, provided this does not override your fundamental rights.
- Legal Compliance: We may process data when required by law.
Your Rights Under GDPR
If you are a resident of the EEA, you have the following data protection rights:
Right of Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data, under certain conditions. This right is not absolute and may be subject to our legal obligations to retain certain records.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to Object to Processing
You have the right to object to our processing of your personal data, under certain conditions, particularly where we are relying on legitimate interests.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
International Data Transfers
Your information may be transferred to and processed in South Africa, where our operations are based. South Africa has data protection legislation (the Protection of Personal Information Act, or POPIA) that provides similar protections to GDPR.
When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
Data Protection Officer
For any queries regarding our data protection practices or to exercise your rights, please contact us at:
Brisk-hawk
42 Greenway Road
Sandton, 2196
Gauteng, South Africa
Email: [email protected]
Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence. For South African residents, you may contact the Information Regulator.
Response Time
We will respond to all legitimate requests within one month. If your request is particularly complex or you have made multiple requests, we may need to extend this period by up to two months, in which case we will notify you.