Your data protection rights under UK and EU law
Last updated: January 2024
Wind Grove is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of protecting your personal data and are transparent about how we process it.
Wind Grove acts as the data controller for personal information collected through this website and our travel services. This means we determine the purposes and means of processing your personal data.
Contact details:
Wind Grove
47 Cathedral Road
Cardiff, CF11 9HB
United Kingdom
Email: [email protected]
The UK GDPR provides you with the following rights regarding your personal data:
You have the right to know how we collect and use your personal data. This is provided through our Privacy Policy and this GDPR information page.
You can request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We aim to rectify data within one month of your request.
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
You can ask us to limit how we use your personal data while we verify its accuracy or assess a complaint.
Where processing is based on consent or contract and carried out by automated means, you can request your data in a commonly used, machine-readable format.
You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.
You have rights concerning decisions made solely by automated means that significantly affect you. We do not currently use automated decision-making in our services.
To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. There is no fee for most requests, though we may charge a reasonable administrative fee for manifestly unfounded or excessive requests.
We process personal data under the following lawful bases:
When arranging travel outside the UK, we may transfer your data to countries that do not have equivalent data protection laws. In such cases, we implement appropriate safeguards such as Standard Contractual Clauses approved by the Information Commissioner's Office.
Given the nature and scale of our data processing activities, we are not required to appoint a Data Protection Officer. However, enquiries regarding data protection can be directed to our team at the contact details above.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We would appreciate the opportunity to address your concerns directly before you escalate to the ICO.
We may update this page to reflect changes in our practices or legal requirements. The date at the top indicates when this information was last revised.
This page provides general information about your GDPR rights and our compliance practices. It should be read alongside our full Privacy Policy for complete details on how we handle personal data. If there is any conflict between this page and the Privacy Policy, the Privacy Policy shall prevail.