GDPR Compliance

Our commitment to protecting your personal data under the General Data Protection Regulation

Our Commitment to GDPR

rare-valuation Limited is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the UK GDPR as retained in UK law following Brexit.

This page provides specific information about our GDPR compliance practices and your rights as a data subject.

Data Controller

For the purposes of data protection legislation, the data controller is:

rare-valuation Limited
42 Berkeley Square
Mayfair, London W1J 5AW
United Kingdom
Company Number: 08745621

Lawful Basis for Processing

We process your personal data only when we have a lawful basis to do so. The lawful bases we rely on include:

  • Consent: You have given clear consent for us to process your personal data for a specific purpose
  • Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
  • Legal obligation: Processing is necessary for us to comply with the law
  • Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests

Your Rights as a Data Subject

Under GDPR, you have the following rights regarding your personal data:

Right of Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies beyond the first request if requests are manifestly unfounded or excessive.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data under certain conditions, including where the data is no longer necessary for the purposes for which it was collected or where you withdraw consent.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Right to Object

You have the right to object to our processing of your personal data under certain conditions, particularly where we process data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not currently engage in automated decision-making or profiling.

How to Exercise Your Rights

To exercise any of your rights, please contact us using the following details:

Email: [email protected]

We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months, in which case we will inform you of the extension and explain the reasons for the delay.

You will not have to pay a fee to access your personal data or to exercise any of your other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Data Security

We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data in transit and at rest
  • Regular security assessments and testing
  • Access controls and authentication measures
  • Staff training on data protection and security
  • Incident response procedures

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required by law.

Data Protection Officer

We have appointed a Data Protection Officer to oversee our GDPR compliance. If you have any questions about how we handle your personal data, you can contact our Data Protection Officer at:

Email: [email protected]

International Data Transfers

We primarily store and process data within the United Kingdom and European Economic Area. If we transfer your personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by the European Commission or UK authorities
  • Transfers to countries that have been deemed to provide an adequate level of protection
  • Your explicit consent to the transfer

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider:

  • The amount, nature, and sensitivity of the personal data
  • The potential risk of harm from unauthorized use or disclosure
  • The purposes for which we process the data and whether we can achieve those purposes through other means
  • Applicable legal requirements

Complaints

You have the right to lodge a complaint with a supervisory authority if you believe we have not complied with data protection laws. In the United Kingdom, the supervisory authority is:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: rare-valuation.com

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first.

Updates to This Information

We may update this GDPR compliance information from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically. The date of the last update is shown at the top of this page.

Contact Us

If you have any questions about our GDPR compliance or how we process your personal data, please contact us:

Email: [email protected]
Post: rare-valuation Limited, 42 Berkeley Square, Mayfair, London W1J 5AW, United Kingdom