t EdgeNebula, we take data protection seriously and are committed to ensuring that your personal data is handled in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws. This policy outlines how we collect, store, protect, and process personal data, ensuring its confidentiality, integrity, and availability.
1. Scope of the Policy
This Data Protection Policy applies to all personal data collected, processed, and stored by EdgeNebula in the course of its business activities. It applies to all employees, contractors, and third parties who process personal data on behalf of EdgeNebula.
2. Definitions
- Personal Data: Any information relating to an identifiable person who can be directly or indirectly identified, such as names, addresses, phone numbers, email addresses, or other personal identifiers.
- Processing: Any operation performed on personal data, including collection, recording, storage, alteration, retrieval, and destruction.
- Data Subject: The individual whose personal data is being processed.
- Data Controller: EdgeNebula, which determines the purposes and means of processing personal data.
- Data Processor: Any third party that processes personal data on behalf of EdgeNebula.
3. Data Protection Principles
EdgeNebula is committed to processing personal data in accordance with the following principles:
- Lawfulness, Fairness, and Transparency: We will process personal data lawfully, fairly, and in a transparent manner.
- Purpose Limitation: We will only collect personal data for specific, explicit, and legitimate purposes and will not process it further in ways incompatible with those purposes.
- Data Minimisation: We will only collect personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
- Accuracy: We will take all reasonable steps to ensure that personal data is accurate and kept up to date.
- Storage Limitation: We will retain personal data only for as long as necessary for the purposes for which it was collected.
- Integrity and Confidentiality: We will process personal data in a way that ensures its security, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.
4. Legal Bases for Processing
We will only process personal data where we have a lawful basis to do so. The legal bases for processing personal data may include:
- Consent: Where you have provided your consent for us to process your data for specific purposes.
- Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
- Legal Obligation: Where we are required to process personal data to comply with a legal obligation.
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these interests are not overridden by the rights and freedoms of the data subject.
5. Data Collection
We collect personal data directly from data subjects when they interact with our website or services, including:
- When you complete forms on our website (e.g., contact forms or newsletter sign-up).
- When you communicate with us by email, phone, or other means.
- When you use our services or engage in any business dealings with EdgeNebula.
6. Data Security
We implement robust security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: Sensitive personal data is encrypted both in transit and at rest.
- Access Control: Personal data is only accessible to authorized personnel with a legitimate business need.
- Data Breach Protocols: We have procedures in place to detect, report, and investigate any data breaches. In the event of a breach, we will notify affected individuals and relevant authorities as required by law.
7. Data Subject Rights
Under the GDPR, data subjects have the following rights regarding their personal data:
- Right of Access: You can request a copy of the personal data we hold about you and how we process it.
- Right to Rectification: You can request that we correct any inaccuracies in your personal data.
- Right to Erasure: You can request that we delete your personal data when it is no longer necessary for the purposes for which it was collected.
- Right to Restriction of Processing: You can request that we restrict the processing of your personal data under certain conditions.
- Right to Data Portability: You can request that we transfer your personal data to another data controller in a structured, commonly used, and machine-readable format.
- Right to Object: You can object to the processing of your personal data for certain purposes, such as direct marketing.
- Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.
To exercise any of these rights, please contact us at info@edge-nebula.com.
8. Data Sharing and Third Parties
We may share personal data with third-party service providers who process data on our behalf (e.g., cloud storage providers, payment processors). These third parties are required to handle personal data in compliance with applicable data protection laws and to use the data only for the purposes specified by EdgeNebula.
We may also share personal data where required by law or to protect our legal rights.
9. Data Retention
We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, or contractual obligations. When personal data is no longer needed, it will be securely deleted or anonymized.
10. Data Protection Officer (DPO)
EdgeNebula has appointed a Data Protection Officer who is responsible for overseeing our data protection practices and ensuring compliance with this policy. If you have any questions or concerns about how we handle your personal data, please contact our DPO at info@edge-nebula.com.
11. Changes to This Policy
We may update this Data Protection Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on our website, and we encourage you to review this policy periodically.
12. Contact Us
If you have any questions about this Data Protection Policy or how we process your personal data, please contact us at:
Email: info@edge-nebula.com
Address: EdgeNebula, 128 City Road, London EC1V 2NX, United Kingdom
