The General Data Protection Regulation (GDPR) is a regulation in EU law that governs data protection and privacy. At Atelier Utrecht, we are committed to complying with GDPR requirements and respecting your data protection rights.
Data Controller
Atelier Utrecht acts as the data controller for personal information collected through this website and our services. We determine the purposes and means of processing personal data.
Legal Basis for Processing
We process your personal data on the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for specific purposes
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purpose for which it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Object to Processing
You have the right to object to our processing of your personal data under certain conditions, particularly where we process data based on legitimate interests.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period depends on the context of the data and our obligations.
International Transfers
We primarily store and process data within the European Economic Area. If any data transfer outside the EEA is necessary, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
Exercising Your Rights
To exercise any of these rights, please contact us using the details below. We will respond to your request within one month. If your request is complex, we may extend this period by two further months, in which case we will notify you.
Complaints
If you believe that we have not handled your personal data properly, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.
Contact Information
For any GDPR-related enquiries or to exercise your rights:
Atelier Utrecht
Storgata 42
0182 Oslo, Norway
[email protected]