DE · EN · FR · TR · RU
← Back
Note: Note (internal, remove before launch): This text is a draft and has not yet been reviewed by a lawyer — see Business Plan section 5.3. In particular, the "Controller" section does not yet conclusively address whether, as a third-country company, an EU representative must be appointed under Art. 27 GDPR.

Privacy Policy

Controller

Aldgate Advisory Limited, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Email: office@aldgate-advisory.co.uk

Data we collect for the free check

Website URL, company name and email address that you provide in the form. We additionally access the website you specify publicly (like a normal website visit) in order to check the criteria referenced in the report.

Data we additionally collect when requesting the full report

Contact person, company name and email address for invoicing.

Purpose and legal basis

Processing takes place to carry out the free check you requested or to fulfil the contract for the full report (Art. 6(1)(b) GDPR), and, where invoicing is concerned, to fulfil commercial record-keeping obligations (Art. 6(1)(c) GDPR).

Recipients

We use Xero (Xero Limited) for invoicing and bookkeeping. We use Proton Mail (Proton AG, Switzerland) to send emails. The necessary data processing agreements are in place with both providers.

Storage period

Scan results without a requested full report are deleted after 90 days. Where a full report has been requested, the commercial record-keeping periods for invoice data apply (generally 10 years).

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Please contact office@aldgate-advisory.co.uk regarding any of these.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority.