We have reviewed the purposes of our processing activities, and selected the most appropriate lawful basis - Contract
We have checked that the processing is necessary for the relevant purpose, and are satisfied that there is no other reasonable way to achieve that purpose.
We have documented our decision on which lawful basis applies to help us demonstrate compliance. - When a data subject makes an online/in shop purchase, a controller processes the address of the individual in order to deliver the goods. This is necessary in order to perform the contract.
We have included information about both the purposes of the processing and the lawful basis for the processing in our privacy notice.
The GDPR provides the following rights for individuals:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling.
more info can be found here
Where we process special category data, we have also identified a condition for processing special category data, and have documented this. - We do not process special data
Where we process criminal offence data, we have also identified a condition for processing this data, and have documented this. - We do not process criminal data