Information for visitors from the European Economic Area
Last updated: January 2024
The General Data Protection Regulation (GDPR) is a European Union regulation that protects the personal data and privacy of individuals within the European Economic Area (EEA). Although Ravine-puffin is based in South Africa, we are committed to protecting the privacy of all our visitors, including those from the EEA.
This page provides additional information about how we handle personal data in compliance with GDPR requirements.
Ravine-puffin acts as the data controller for personal information collected through this website. Our contact details are:
Ravine-puffin
15 Waterfront Drive
Knysna, 6571
Western Cape, South Africa
Email: [email protected]
Under GDPR, we must have a legal basis for processing your personal data. The legal bases we rely upon include:
Where you have given clear consent for us to process your personal data for a specific purpose. For example:
Where processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract. For example:
Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data that overrides those interests. For example:
If you are an EEA resident, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you, along with information about how we use it.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose for which it was collected.
You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request. If your request is complex, we may extend this period by two months, but we will inform you of any extension within the first month.
We may need to verify your identity before processing your request. If we are unable to verify your identity, we may ask for additional information.
As we are based in South Africa, your personal data will be transferred to and processed in South Africa. South Africa is not currently recognised as providing an adequate level of data protection under GDPR.
When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as:
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods are outlined in our Privacy Policy.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence.
We would, however, appreciate the opportunity to address your concerns before you approach the supervisory authority. Please contact us first at [email protected]
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.
If you have any questions about this GDPR information or our data practices, please contact us:
Ravine-puffin
15 Waterfront Drive
Knysna, 6571
Western Cape, South Africa
Email: [email protected]