GDPR Compliance

Our Commitment to Data Protection

Spring-hawk is committed to protecting the personal data of all individuals, including those located in the European Economic Area (EEA). This page outlines our compliance with the General Data Protection Regulation (GDPR) and explains your rights under this regulation.

Data Controller

Spring-hawk acts as the data controller for personal information collected through this website. Our contact details are:

Spring-hawk
Unit 4, The Old Customs House
17 Dock Road, Victoria Basin
Cape Town, 8001
South Africa

Email: [email protected]

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. Our processing activities are based on:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract
• Legal obligation: Where processing is necessary to comply with applicable laws
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms

Your GDPR Rights

If you are located in the EEA, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

You have the right to request correction of any inaccurate personal data we hold about you, and to have incomplete data completed.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose for which it was collected.

Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis for processing.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the details provided above. We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.

We may request specific information from you to help us confirm your identity and ensure your right to access the information or exercise other rights.

International Data Transfers

As we are based in South Africa, personal data collected from EEA residents may be transferred outside the EEA. When such transfers occur, we ensure appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by the European Commission
• Binding corporate rules
• Other legally recognised transfer mechanisms

Data Protection Officer

Given the nature and scale of our data processing activities, we have not appointed a dedicated Data Protection Officer. However, all data protection queries should be directed to our main contact address, and we will ensure they are handled appropriately.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this will be the data protection authority in your country of residence.

We would appreciate the opportunity to address your concerns before you approach a supervisory authority, so please contact us in the first instance.

Updates to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.