GDPR Compliance
Information regarding data protection and your rights under GDPR.
Data Controller
grove-reach acts as the data controller for personal information collected through this website.
Contact: [email protected]
Legal Basis for Processing
We process personal data based on:
- Consent: When you submit forms or accept cookies
- Legitimate interests: For website functionality and security
- Contractual necessity: To provide requested services
- Legal obligations: When required by law
Your Rights Under GDPR
Right to Access
You have the right to request a copy of the personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data under certain circumstances.
Right to Restrict Processing
You can request limitation on how we process your personal data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format.
Right to Object
You may object to processing of your personal data for specific purposes.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time.
Data Retention
Personal data is retained only as long as necessary for the purposes for which it was collected, or as required by legal obligations.
Inquiry data is typically retained for two years unless you request earlier deletion.
Data Security
We implement appropriate technical and organizational measures to ensure data security, including:
- Encryption of data in transit
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
International Transfers
Personal data is processed within the European Economic Area. Any transfers outside the EEA are conducted with appropriate safeguards in place.
Automated Decision Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.
For the UK, this is the Information Commissioner's Office (ICO).
Exercising Your Rights
To exercise any of your GDPR rights, contact us at [email protected]
We will respond to your request within one month.