GDPR Compliance

What is UK GDPR?

The UK General Data Protection Regulation (UK GDPR) is the UK's data protection law that came into effect on 1 January 2021. It governs how personal data is collected, processed, and protected in the United Kingdom.

At Domendomen, we are committed to full compliance with UK GDPR and ensuring that your personal data is handled with the highest standards of care and protection.

Your Rights Under UK GDPR

1. Right of Access

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data.

What this means: You can request a copy of all personal data we hold about you.

2. Right to Rectification

You have the right to obtain from us the rectification of inaccurate personal data concerning you.

What this means: You can ask us to correct any incorrect information we have about you.

3. Right to Erasure (Right to be Forgotten)

You have the right to obtain from us the erasure of personal data concerning you without undue delay.

What this means: You can request that we delete your personal data in certain circumstances.

4. Right to Restrict Processing

You have the right to obtain from us restriction of processing where certain conditions apply.

What this means: You can ask us to limit how we use your personal data.

5. Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format.

What this means: You can request a copy of your data in a format that can be easily transferred to another service.

6. Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.

What this means: You can object to certain types of processing of your personal data.

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us using the information provided below. We will respond to your request within one month of receipt.

Email

Send your request to: privacy@domendomen.com

Post

Data Protection Officer
Domendomen Ltd
[Address]
United Kingdom

Information We Need from You

To process your request efficiently, please provide:

Your full name and contact details
Description of the right you wish to exercise
Any relevant details to help us locate your data
Proof of identity (to ensure we don't disclose data to the wrong person)

Our Legal Basis for Processing

We process your personal data under the following legal bases:

Consent

When you have given clear consent for us to process your personal data for specific purposes, such as marketing communications.

Legitimate Interest

For purposes such as website analytics, improving our services, and ensuring website security.

Legal Obligation

To comply with UK gambling regulations, including age verification requirements.

Contract Performance

To provide the services you have requested from us.

Data Protection Principles

We adhere to the following data protection principles:

Lawfulness, fairness and transparency: We process data lawfully, fairly and in a transparent manner
Purpose limitation: We collect data for specified, explicit and legitimate purposes
Data minimisation: We only collect data that is adequate, relevant and limited to what is necessary
Accuracy: We keep personal data accurate and up to date
Storage limitation: We retain data only for as long as necessary
Integrity and confidentiality: We process data in a manner that ensures appropriate security
Accountability: We are responsible for and can demonstrate compliance with these principles

Data Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

SSL encryption for all data transmission
Secure servers with regular security updates
Access controls and authentication systems
Regular security assessments and penetration testing
Staff training on data protection and security
Incident response procedures

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

Notify the Information Commissioner's Office (ICO) within 72 hours
Inform affected individuals without undue delay if the breach poses a high risk
Provide clear information about the nature of the breach and steps taken
Offer guidance on protective measures you can take

International Data Transfers

If we need to transfer your personal data outside the UK, we ensure appropriate safeguards are in place:

Adequacy decisions by the UK government
Standard contractual clauses approved by the ICO
Binding corporate rules
Certification schemes and codes of conduct

Automated Decision Making

We do not use automated decision-making processes that significantly affect you. If this changes in the future, we will:

Inform you about the logic involved
Explain the significance and consequences
Provide you with the right to request human intervention
Allow you to express your point of view

Children's Data

Our website is not intended for children under 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it immediately.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office

Website: https://ico.org.uk

Phone: 0303 123 1113

Address: Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes.