Last updated: August 30, 2023
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). The GDPR is a European Union law that sets out strict rules on how organizations can collect, use, and store personal data.
The data controller responsible for this website is WNRTG, who can be contacted at Unit B1, St. Catherines Park, Pengam Road, Cardiff, CF24 2RZ.
Lawful basis for processing
We process personal data in accordance with GDPR. The GDPR requires us to have a lawful basis for processing personal data. The lawful bases for processing are:
Consent: You have given us your consent to process your data for a specific purpose.
Performance of a contract: We need to process your data to perform a contract with you, for example, to provide you with our services.
Legitimate interests: We have a legitimate interest in processing your data for certain purposes, such as to improve our services or to protect our legal rights.
Legal obligation: We may be required to process your data by law, for example, to comply with tax laws.
Vital interests: We may process your data if it is necessary to protect your vital interests or the vital interests of another person.
Public interest: We may process your data in the public interest, for example, to prevent fraud or to protect national security.
Withdrawing consent and deleting data
If you withdraw your consent, we may still be able to process your data if we have another lawful basis for doing so, such as the performance of a contract or a legal obligation.
You can also request that we delete your data. We will delete your data as soon as it is no longer necessary for the purposes for which we collected it. However, we may be required to retain some of your data for legal or regulatory reasons.
The GDPR requires us to implement appropriate technical measures to protect data. We use a variety of security measures to protect your data, including:
Data encryption: We use Transport Layer Security (TLS), also known as Secure Sockets Layer (SSL), to encrypt any data you supply to us through our website. This means that your data is protected as it travels over the internet.
Access control: We restrict access to your personal data to authorised employees and contractors who need to access it to perform their job duties.
We may also disclose personal information if we believe that disclosure is necessary to investigate, prevent, or take action regarding potential violations of our terms of service or other policies, or to protect the safety of our users.