Our Commitment to GDPR
hollow-pulse is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page provides detailed information about how we handle your data and your rights under GDPR.
Data Controller Information
For the purposes of GDPR, the data controller is:
hollow-pulse
14 Riverside Quarter
Bristol BS1 6UQ
United Kingdom
Email: [email protected]
Lawful Bases for Processing
We process personal data only when we have a lawful basis to do so. The lawful bases we rely on include:
- Contract: Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
- Legitimate Interest: Processing is necessary for our legitimate interests or those of a third party, provided these interests do not override your fundamental rights
- Consent: You have given clear consent for us to process your personal data for a specific purpose
- Legal Obligation: Processing is necessary to comply with the law
- Vital Interests: Processing is necessary to protect someone's life or physical safety
Your GDPR Rights
Right to Access
You have the right to request a copy of the personal data we hold about you. This is known as a subject access request. We will provide this information free of charge within one month of your request.
Right to Rectification
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent on which processing is based.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
Right to Data Portability
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates data protection law. In the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO).
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us at:
Email: [email protected]
Address: 14 Riverside Quarter, Bristol BS1 6UQ, United Kingdom
We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request to protect your personal data from unauthorized access.
Data Protection Impact Assessments
Where we process personal data that may result in high risk to your rights and freedoms, we conduct data protection impact assessments to identify and mitigate those risks. This is particularly relevant for our monitoring services, where we process sensitive data about health and daily activities.
International Data Transfers
We primarily store and process data within the United Kingdom and European Economic Area. If we need to transfer data outside these regions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.
Children's Data
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete that information.
Automated Decision-Making
We do not make decisions based solely on automated processing that would significantly affect you. Our monitoring systems may generate alerts based on pattern analysis, but all decisions regarding response and intervention involve human review and judgment.
Updates to Our GDPR Practices
We regularly review our data protection practices to ensure ongoing compliance with GDPR. Any significant changes will be communicated through updates to our Privacy Policy and this GDPR page.