1. GDPR Overview
The General Data Protection Regulation (GDPR) protects the privacy rights of EU residents. Terrific Garden Trust is committed to GDPR compliance for all clients, regardless of location.
2. Legal Basis for Processing
We process personal data based on:
- Consent: You have given clear consent for specific purposes
- Contract: Processing is necessary to fulfill service agreements
- Legal Obligation: Required by law (tax records, business licenses)
- Legitimate Interest: Necessary for business operations without overriding your rights
3. Your GDPR Rights
Right to Information: Know what personal data we collect and how it's used
Right of Access: Request copies of your personal data
Right to Rectification: Request correction of inaccurate personal data
Right to Erasure: Request deletion of your personal data
Right to Restrict Processing: Request limitation of how we use your data
Right to Data Portability: Request transfer of your data to another service
Right to Object: Object to processing based on legitimate interests
4. Data Protection Officer
For GDPR-related inquiries, contact our Data Protection Officer:
Email: [email protected]
Phone: +1 (503) 555-0187
Address: 2847 NW Thurman Street, Portland, OR 97210
5. Data Security Measures
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption of sensitive data in transit and at rest
- Access controls and authentication systems
- Regular security assessments and updates
- Staff training on data protection practices
- Incident response procedures for data breaches
6. Data Retention
We retain personal data only as long as necessary for the purposes collected or as required by law:
- Client records: 7 years after service completion
- Marketing data: Until consent is withdrawn
- Website analytics: 26 months maximum
- Financial records: As required by tax authorities
7. International Data Transfers
If we transfer your data outside the EU, we ensure adequate protection through:
- Adequacy decisions by the European Commission
- Standard contractual clauses
- Binding corporate rules
- Certification schemes
8. Exercising Your Rights
To exercise your GDPR rights:
- Submit requests to [email protected]
- Include proof of identity with requests
- We will respond within 30 days
- No fee for most requests (excessive requests may incur charges)
9. Complaints
You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with GDPR requirements.
10. Policy Updates
We will notify you of material changes to our GDPR compliance practices and update this policy as needed to reflect current practices and legal requirements.
