Last updated: January 2024
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. While crater-dive operates in South Africa, we are committed to upholding data protection standards that align with international best practices, including GDPR principles.
crater-dive acts as the data controller for personal information collected through our website and services. Our contact details are:
crater-dive
42 Commissioner Street
Johannesburg, 2001
South Africa
Email: [email protected]
We process personal data based on the following legal grounds:
If you are located in the European Economic Area, you have the following rights:
You have the right to request a copy of the personal data we hold about you and information about how we process it.
You have the right to request that we correct any inaccurate personal data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
As we operate in South Africa, data may be transferred to and processed in South Africa. We implement appropriate safeguards to ensure that personal data receives an adequate level of protection.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws. When data is no longer needed, it is securely deleted or anonymised.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours. We will also notify affected individuals when required.
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex, we may extend this period by a further two months, and we will inform you of any such extension.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In South Africa, you may contact the Information Regulator.
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.