GDPR Compliance

Our Commitment to GDPR

Grand Meadow respects the privacy rights of individuals in the European Economic Area and complies with the General Data Protection Regulation (GDPR). This page explains how we handle personal data in accordance with GDPR requirements.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contract performance: Processing necessary to fulfill orders and provide services you request.
• Consent: Where you have given explicit consent for specific processing activities, such as marketing communications.
• Legitimate interests: Processing necessary for our business operations, such as fraud prevention and website security, balanced against your rights.
• Legal obligations: Processing required to comply with applicable laws and regulations.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you, including information about how we use it and who we share it with.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent.

Right to Restriction

You can request that we limit how we use your personal data in certain circumstances, such as while we verify its accuracy.

Right to Data Portability

You can request a copy of your personal data in a structured, commonly used, machine-readable format to transfer to another service provider.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Data Protection Officer

For questions about our GDPR compliance or to exercise your rights, contact us at [email protected] with "GDPR Request" in the subject line. We will respond to your request within one month.

International Data Transfers

If we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or transfers to countries with adequacy decisions.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates GDPR requirements.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.