Our Commitment to Data Protection
The Art of Living Spaces is committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: For marketing communications and optional services
- Contract: To provide design services you've requested
- Legitimate Interest: To improve our services and website functionality
- Legal Obligation: To comply with tax and business regulations
Your Rights Under GDPR
Right of Access (Article 15)
You have the right to obtain confirmation that we are processing your personal data and access to that data along with specific information about the processing.
Right to Rectification (Article 16)
You have the right to have inaccurate personal data corrected and incomplete personal data completed.
Right to Erasure (Article 17)
You have the right to have your personal data deleted in certain circumstances, including when the data is no longer necessary for the original purpose.
Right to Restrict Processing (Article 18)
You have the right to request restriction of processing in specific situations, such as when you contest the accuracy of the data.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Article 21)
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent (Article 7)
Where processing is based on consent, you have the right to withdraw that consent at any time.
How to Exercise Your Rights
To exercise any of your rights, please contact us using:
Data Protection Officer: [email protected]
Phone: (312) 555-0198
Address: 789 Design Avenue, Chicago, IL 60654, USA
We will respond to your request within one month (extendable by two additional months in complex cases).
Data Processing Activities
Website Analytics
Purpose: Website improvement and user experience optimization
Legal Basis: Legitimate interest
Data: IP address, browser info, page views, session data
Retention: 26 months
Contact Forms and Inquiries
Purpose: Responding to inquiries and providing requested services
Legal Basis: Consent and contract
Data: Name, email, phone, project details
Retention: 7 years for business purposes
Marketing Communications
Purpose: Sending design tips and service updates
Legal Basis: Consent
Data: Name, email, preferences
Retention: Until consent withdrawn
International Data Transfers
We may transfer your personal data to third countries. When we do, we ensure appropriate safeguards are in place, such as:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules
- Certification schemes
Data Security Measures
We implement appropriate technical and organizational measures to ensure data security:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication
- Staff training on data protection
- Incident response procedures
Data Breach Notification
In case of a personal data breach likely to result in high risk to your rights, we will notify you within 72 hours of becoming aware of the breach, as required by GDPR Article 34.
Automated Decision Making
We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects.
Children's Data
We do not knowingly process personal data of children under 16 years of age without appropriate parental consent.
Supervisory Authority
If you believe we are not processing your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection supervisory authority.
Data Protection Impact Assessment
We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in high risks to individual rights and freedoms.
Record of Processing Activities
We maintain detailed records of our processing activities as required by GDPR Article 30, available for review by supervisory authorities.
Contact Information
For any questions about GDPR compliance or data protection:
Data Controller: The Art of Living Spaces
Email: [email protected]
Phone: (312) 555-0198
Address: 789 Design Avenue, Chicago, IL 60654, USA
Last updated: January 2024
