🇪🇺🇬🇧GDPR & UK GDPR Compliant

Llewellyn Systems Inc is committed to compliance with the General Data Protection Regulation (EU) 2016/679 and the UK General Data Protection Regulation. This page summarizes our GDPR compliance measures and your rights as a data subject.

Our Commitment

We process personal data lawfully, fairly, and transparently
We collect data only for specified, explicit, and legitimate purposes
We minimize data collection to what is necessary
We keep data accurate and up to date
We retain data only as long as necessary
We implement appropriate security measures

Your Rights Under GDPR

Right of Access (Article 15)

Request a copy of your personal data and information about how we process it.

Right to Rectification (Article 16)

Request correction of inaccurate or incomplete personal data.

Right to Erasure (Article 17)

Request deletion of your personal data ("right to be forgotten") in certain circumstances.

Right to Restriction (Article 18)

Request limitation of processing in certain circumstances.

Right to Data Portability (Article 20)

Receive your data in a structured, machine-readable format.

Right to Object (Article 21)

Object to processing based on legitimate interests or for direct marketing.

Rights Related to Automated Decision-Making (Article 22)

Not be subject to decisions based solely on automated processing with legal effects.

Lawful Bases for Processing

We process personal data under the following lawful bases:

Contract (Article 6(1)(b)): Processing necessary to perform our contract with you
Legitimate Interests (Article 6(1)(f)): Processing for our legitimate business interests, balanced against your rights
Legal Obligation (Article 6(1)(c)): Processing required to comply with law
Consent (Article 6(1)(a)): Where you have given specific consent

International Data Transfers

When we transfer personal data outside the EEA or UK, we ensure appropriate safeguards:

Standard Contractual Clauses (SCCs) approved by the European Commission
UK International Data Transfer Agreement (IDTA) for UK transfers
Adequacy decisions where applicable
Supplementary measures as required by Schrems II

See our Data Processing Addendum for details.

Data Protection Officer

We have appointed a Data Protection Officer who can be contacted at dpo@llewellynsystems.com for any questions about our data protection practices or to exercise your rights.

Exercise Your Rights

To exercise any of your GDPR rights, contact us at privacy@llewellynsystems.com. We will respond within one month (extendable by two months for complex requests). We may need to verify your identity before processing your request.

Supervisory Authorities

You have the right to lodge a complaint with a supervisory authority:

EU: Your local Data Protection Authority - List of DPAs
UK: Information Commissioner's Office (ICO) - ico.org.uk

Contact

Llewellyn Systems Inc
A Sound of Life Media Company
Data Protection Officer: dpo@llewellynsystems.com
Privacy: privacy@llewellynsystems.com

EU Representative: [On file with supervisory authorities]
UK Representative: [On file with ICO]

GDPR Compliance