GDPR Compliance

Last Updated: September 11, 2026

1. Overview

fjord-condor is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This document outlines how we comply with GDPR requirements and respect your data protection rights.

2. Data Controller

The data controller responsible for your personal information is:

fjord-condor
Cairn House, 14 Lakeside Approach
Keswick, Cumbria CA12 5DJ
United Kingdom
Email: [email protected]

3. Your Rights Under GDPR

3.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to access that data. We will provide a copy of your data in a structured, commonly used format.

3.2 Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion of such data.

3.3 Right to Erasure

You may request deletion of your personal data when:

• The data is no longer necessary for the purposes collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

3.4 Right to Restriction of Processing

You may request restriction of processing when:

• You contest the accuracy of personal data
• Processing is unlawful but you oppose erasure
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification

3.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transmit it to another controller where technically feasible.

3.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes at any time.

3.7 Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

4. How to Exercise Your Rights

To exercise any of your GDPR rights, send a request to [email protected] with the subject line "GDPR Request". Please include:

• Your full name
• Email address associated with your data
• Specific right you wish to exercise
• Any relevant details to help us locate your data

We will respond to your request within 30 days.

5. Legal Bases for Processing

We process personal data based on the following legal grounds:

• Consent: When you submit forms or accept cookies
• Contract: To fulfill route documentation requests
• Legitimate Interests: To operate and improve our services, provided your rights do not override these interests
• Legal Obligation: To comply with applicable laws

6. Data Protection Principles

We adhere to GDPR principles ensuring data is:

• Processed lawfully, fairly, and transparently
• Collected for specified, explicit, and legitimate purposes
• Adequate, relevant, and limited to what is necessary
• Accurate and kept up to date
• Kept only as long as necessary
• Processed securely with appropriate technical measures

7. International Data Transfers

Your personal data is primarily stored within the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses.

8. Data Security

We implement appropriate technical and organizational security measures including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

9. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach.

10. Right to Lodge a Complaint

If you believe we have not complied with GDPR, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

11. Contact Us

For questions about GDPR compliance or to exercise your rights, contact [email protected]