GDPR Compliance
Our commitment to data protection under the General Data Protection Regulation
Last updated: January 2024
deft-vine respects the privacy rights of individuals within the European Union and European Economic Area. This page outlines how we comply with the General Data Protection Regulation (GDPR) when processing personal data of EU residents.
Data Controller
deft-vine acts as the data controller for personal information collected through our website and services. For GDPR-related enquiries:
deft-vine
42 Rivonia Boulevard
Sandton, 2196
South Africa
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you voluntarily submit information through our forms or explicitly agree to specific processing activities
- Contractual Necessity: When processing is required to deliver services you have requested
- Legitimate Interests: When processing supports our business operations without overriding your fundamental rights
- Legal Obligation: When we must comply with applicable laws and regulations
Your GDPR Rights
As an EU resident, you have the following rights regarding your personal data:
Right of Access: You may request confirmation of whether we process your personal data and obtain a copy of that data.
Right to Rectification: You may request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure: You may request deletion of your personal data in certain circumstances, such as when data is no longer necessary for its original purpose.
Right to Restriction: You may request that we limit processing of your data while disputes are resolved or when you have objected to processing.
Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format for transfer to another controller.
Right to Object: You may object to processing based on legitimate interests, including processing for direct marketing purposes.
Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that significantly affect you.
International Data Transfers
As deft-vine is based in South Africa, personal data collected from EU residents may be transferred outside the European Economic Area. We implement appropriate safeguards for such transfers, including standard contractual clauses approved by the European Commission.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to legal retention requirements. When data is no longer required, it is securely deleted or anonymised.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us at [email protected] with a clear description of your request. We will respond within one month of receiving your request. Complex requests may require an extension of up to two additional months.
We may request verification of your identity before processing requests to ensure we do not disclose information to unauthorised parties.
Complaints
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority in your EU member state of residence or place of work.
Updates to This Notice
We may update this GDPR compliance notice to reflect changes in our practices or legal requirements. Material changes will be communicated through appropriate channels.