GDPR Compliance

Last updated: May 20, 2026

Our Commitment to GDPR

storm-technics is committed to compliance with the General Data Protection Regulation (GDPR) and UK data protection laws. This page outlines how we meet our obligations under these regulations.

Legal Basis for Processing

We process personal data under the following legal bases:

Consent: When you provide explicit consent for specific processing activities
Contract: When processing is necessary to fulfill our contractual obligations for programme delivery
Legitimate Interests: When we have legitimate business interests that do not override your rights
Legal Obligation: When we must process data to comply with legal requirements

Your Rights Under GDPR

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion.

Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when:

The data is no longer necessary for the purpose it was collected
You withdraw consent and no other legal basis exists
You object to processing and there are no overriding legitimate grounds
The data has been unlawfully processed

Right to Restriction of Processing

You may request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or significantly affects you.

Data Protection Officer

For questions regarding GDPR compliance or to exercise your rights, please contact our Data Protection Officer:

Email: [email protected]
Address: 47 Park Street, Bristol BS1 5NL, United Kingdom

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

We do not transfer personal data outside the UK or European Economic Area. If such transfers become necessary, we will ensure appropriate safeguards are in place.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy or as required by law. Specific retention periods include:

Programme participant data: 7 years after programme completion
Enquiry data: 2 years from last contact
Marketing consent: Until withdrawn or 3 years of inactivity

Children's Data

When processing data about children participating in our programmes, we obtain consent from parents or guardians. Parents have the right to access, rectify, or delete their child's personal data.

Supervisory Authority

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: https://storm-technics.com
Phone: 0303 123 1113

How to Exercise Your Rights

To exercise any of your GDPR rights, please:

Send an email to [email protected] with "GDPR Request" in the subject line
Clearly state which right you wish to exercise
Provide sufficient information to identify yourself
Include any relevant details about your request

We will respond to your request within one month. In complex cases, this may be extended by two additional months, and we will inform you of the extension.

Updates to GDPR Compliance

We regularly review our GDPR compliance procedures. This page will be updated to reflect any changes in our practices or legal requirements.