GDPR Compliance

ibis-trek is committed to protecting the privacy and security of your personal data in accordance with the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements and what rights you have regarding your personal data.

Legal Basis for Processing

We process your personal data under the following legal bases:

Contractual Necessity

Processing is necessary to perform our contract with you when you enroll in our courses or use our services.

Legitimate Interests

We process certain data based on our legitimate interests in:

• Improving our courses and services
• Ensuring security and preventing fraud
• Analyzing usage patterns to enhance user experience
• Communicating with you about our services

Consent

For marketing communications and certain cookies, we rely on your explicit consent, which you can withdraw at any time.

Legal Obligations

We process data when required to comply with legal obligations, such as tax and accounting requirements.

Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to your personal data. We will provide you with a copy of the data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction of Processing

You can request that we restrict processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our GDPR compliance. You can contact our DPO at:

Email: [email protected]
Address: 127 Kingsway, London WC2B 6NH, United Kingdom

Data Processing and Storage

Data Minimization

We only collect and process personal data that is necessary for the specific purposes outlined in our Privacy Policy.

Storage Limitation

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection
• Incident response procedures

International Data Transfers

When we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Binding Corporate Rules

Third-Party Processors

We work with third-party service providers who process data on our behalf. We ensure that:

• All processors are GDPR-compliant
• Data Processing Agreements are in place
• Processors implement appropriate security measures
• Processors only process data according to our instructions

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware
• Notify affected individuals without undue delay if the breach poses a high risk
• Document all data breaches and our response

Cookies and Tracking

We use cookies and similar technologies in compliance with GDPR requirements. You can manage your cookie preferences at any time. For more information, see our Cookies Policy.

Children's Data

Our services are not directed at children under 16 years of age. We do not knowingly collect or process personal data from children without parental consent.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk

Updates to GDPR Compliance

We regularly review and update our GDPR compliance measures. Any significant changes will be communicated through our website and, where appropriate, directly to you.

Contact Us

If you have questions about our GDPR compliance or wish to exercise your rights, please contact us:

ibis-trek
GDPR Compliance Team
127 Kingsway
London WC2B 6NH
United Kingdom
Email: [email protected]