GDPR Compliance
Last Updated: November 3, 2024
Our Commitment to GDPR
Meta-meadow is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and what rights you have regarding your personal data.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill our service agreement with you when you book an experience
- Consent: When you have given explicit consent for specific processing activities
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services
- Legal Obligation: Processing required to comply with legal requirements
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You have the right to request access to the personal data we hold about you. We will provide you with a copy of your data in a commonly used electronic format.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
You have the right to request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request restriction of processing of your personal data in certain situations, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable data protection laws.
Data Protection Officer
For any questions regarding GDPR compliance or to exercise your rights, please contact us at:
Email: [email protected]
International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.
Data Minimization
We collect only the personal data that is necessary for the specific purposes outlined in our Privacy Policy. We do not collect excessive data beyond what is needed to provide our services.
Storage Limitation
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Staff training on data protection practices
- Incident response procedures
Third-Party Processors
We work with third-party service providers who process personal data on our behalf. All such processors are required to:
- Process data only on our documented instructions
- Implement appropriate security measures
- Maintain confidentiality
- Assist us in complying with GDPR requirements
- Delete or return data upon termination of services
Exercising Your Rights
To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond to your request within one month, though this period may be extended by two additional months where necessary, taking into account the complexity and number of requests.
We may request specific information from you to confirm your identity before processing your request.
Changes to This Policy
We may update this GDPR compliance statement from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised date.