1. Who We Are

atbio.me is a trading style of Atb World Ltd, a company registered in England and Wales. Our company registration number is 12527046. Our registered office is at 34 Hillside Road, Dudley, DY1 3LA. We act as the data controller for the personal data we process.

2. What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law in the European Union and the UK that grants individuals greater control over their personal data. It sets out strict rules for how personal data must be collected, processed, and stored.

3. Our Principles for Processing Personal Data

We adhere to the following principles when processing your personal data under GDPR:

• Lawfulness, fairness, and transparency: We process data lawfully, fairly, and in a transparent manner.
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes and do not process it further in a manner incompatible with those purposes.
• Data minimization: We collect only adequate, relevant, and limited data necessary for the purposes for which it is processed.
• Accuracy: We ensure personal data is accurate and, where necessary, kept up to date.
• Storage limitation: We keep personal data for no longer than is necessary for the purposes for which it is processed.
• Integrity and confidentiality: We process personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.
• Accountability: We are responsible for, and must be able to demonstrate compliance with, these principles.

4. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• The right to be informed: You have the right to know how your data is collected and used.
• The right of access: You can request a copy of the personal data we hold about you.
• The right to rectification: You can request that we correct inaccurate or incomplete personal data.
• The right to erasure ("right to be forgotten"): You can request the deletion of your personal data under certain circumstances.
• The right to restrict processing: You can request that we limit the way we use your data under certain circumstances.
• The right to data portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
• The right to object: You can object to the processing of your personal data under certain circumstances.
• Rights in relation to automated decision-making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

5. How We Collect and Use Your Personal Data

For detailed information on the types of personal data we collect, the purposes for which we use it, and the legal basis for processing, please refer to our comprehensive Privacy Policy.

6. Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing your personal data. These measures are designed to prevent unauthorized access, disclosure, alteration, or destruction of your data.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. For more details on our data retention practices, please refer to our Privacy Policy.

8. International Data Transfers

Your personal data may be transferred to, and stored at, a destination outside the European Economic Area (EEA) and the UK. Where this occurs, we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR, such as relying on adequacy decisions or standard contractual clauses.

9. Changes to This GDPR Policy

We may update this GDPR Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website and updating the "Last Updated" date. Your continued use of atbio.me after such changes constitutes your acceptance of the revised policy.

10. Contact Us and Supervisory Authority

If you have any questions about this GDPR Policy or wish to exercise any of your rights, please contact us at privacy@atbio.me

You also have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you believe that the processing of your personal data infringes GDPR.