GDPR Compliance
Smart Seminar operates under UK GDPR (post-Brexit) and the UK Data Protection Act 2018. This page covers lawful basis, data subject rights, and how to exercise them.
Applicable legislation
Smart Seminar is subject to the UK General Data Protection Regulation (UK GDPR) as retained in UK law following the withdrawal from the European Union, and the UK Data Protection Act 2018. We are not subject to EU GDPR unless processing data about individuals in EU member states.
Lawful basis for processing
| Processing activity | Lawful basis | UK GDPR Article |
|---|---|---|
| Newsletter subscriptions | Consent | Article 6(1)(a) |
| Responding to contact form submissions | Legitimate interests | Article 6(1)(f) |
| Cookie preference storage | Legitimate interests (preference memory) | Article 6(1)(f) |
| Browser local storage (tool inputs) | Not personal data — local device only | N/A |
Your rights under UK GDPR (Articles 15–22)
- Article 15 — Right of access: You have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data.
- Article 16 — Right to rectification: You have the right to have inaccurate personal data corrected without undue delay.
- Article 17 — Right to erasure: You have the right to request deletion of your personal data in certain circumstances, including where you withdraw consent.
- Article 18 — Right to restriction: You have the right to request that we restrict processing of your data in certain circumstances.
- Article 20 — Right to data portability: Where processing is based on consent and carried out by automated means, you have the right to receive your data in a structured, machine-readable format.
- Article 21 — Right to object: You have the right to object to processing based on legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds.
How to make a Subject Access Request
To exercise any of the rights above, contact us at [email protected] with the subject line "Data Subject Request — [Right being exercised]". We will respond within one calendar month of receiving a valid request, as required by UK GDPR Article 12.
We may need to verify your identity before processing the request. We will not charge a fee for requests unless they are manifestly unfounded or excessive.
Data Protection Officer
Contact: [email protected]
Right to complain
If you believe we have not complied with UK GDPR in our handling of your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by post to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.