Your data protection rights under UK GDPR
Last updated: January 2024
calm-otter is committed to ensuring the security and protection of the personal information that we process, and to providing a compliant and consistent approach to data protection. We have implemented this GDPR compliance statement to explain how we adhere to the UK General Data Protection Regulation.
calm-otter acts as the Data Controller for personal information collected through our website and during the provision of our vehicle rental services. Our registered address is:
Unit 7, Victoria Business Park
Oldham Road, Manchester
M40 2QR, United Kingdom
The UK GDPR provides you with certain rights regarding your personal data:
You have the right to request a copy of the personal information we hold about you. We will respond to your request within one month and provide the information free of charge unless the request is manifestly unfounded or excessive.
If you believe that any information we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete that information. We will respond to such requests within one month.
You have the right to request that we delete your personal information in certain circumstances, including when the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful.
Where processing is based on consent or contract performance and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis, or where processing is for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
We have procedures in place to detect, investigate, and report personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach.
We primarily process and store personal data within the United Kingdom. Where we transfer personal data outside the UK, we ensure that appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or binding corporate rules.
While we are not required to appoint a Data Protection Officer under the UK GDPR, we have designated a data protection lead who can be contacted for any data protection queries:
Email: [email protected]
To exercise any of the rights described above, please submit a request to us using the following contact details:
Email: [email protected]
Post: Data Protection, calm-otter, Unit 7, Victoria Business Park, Oldham Road, Manchester, M40 2QR
We may need to verify your identity before processing your request. We will respond to your request within one month, though this period may be extended by a further two months where necessary.
If you are not satisfied with how we have handled your personal data or responded to your request, you have the right to lodge a complaint with the Information Commissioner's Office:
Website: ico.org.uk
Telephone: 0303 123 1113
We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date.