Privacy Policy

This Privacy Policy (“Policy”) describes how Tornado Real Estate (“we,” “us,” or “our”) collects, uses, and discloses your personal data (“Data”) when you use our website (the “Site”). It also outlines your rights under the General Data Protection Regulation (GDPR) (EU Regulation 2016/679) and how you can exercise them.

Data Collection and Legal Basis for Processing

We collect and process various types of Data based on the service you use and your interaction with the Site:

• Data You Provide Directly: This includes information you submit through contact forms, quote requests, newsletter subscriptions, or project inquiries. It may involve your name, email address, phone number, and project details.
  • Legal Basis: We process this Data based on your consent for us to provide the requested services (contractual necessity).
• Data Collected Automatically: We use cookies and similar technologies to collect information automatically when you visit our Site. This may include your IP address, browser type, operating system, referring URLs, and browsing activity.
  • Legal Basis: We process this Data with your legitimate interest for website optimization and user experience improvement. You can opt-out of cookies through your browser settings.

Data Use and Processing Purposes

We use your Data for the following purposes, always adhering to the legal basis mentioned:

• Provide and Maintain the Site: Delivering content, fulfilling requests, and managing user accounts (contractual necessity).
• Respond to Inquiries and Requests: Answering your questions, providing quotes, and managing project communications (contractual necessity).
• Send Service Information: Updates on project progress, newsletters (with consent, you can unsubscribe anytime).
• Improve the Site: Analyzing user behavior to enhance functionality and content (legitimate interest).

Data Sharing and Transfers

We may share your Data with third-party service providers who assist us in operating the business and delivering services. These providers are GDPR compliant and bound by contractual obligations to keep your Data secure and confidential.

We will not sell or share your Data for marketing purposes without your explicit consent. Data transfers outside the European Economic Area (EEA) will only occur if the recipient country offers an adequate level of data protection or if appropriate safeguards are implemented (e.g., Standard Contractual Clauses).

Data Retention

We retain your Data for as long as necessary to fulfill the purposes outlined in this Policy. We also consider legal obligations, dispute resolution requirements, and archiving needs.

Your Rights under GDPR

The GDPR grants you several rights regarding your Data:

• Right to Access: You can request a copy of your Data held by us.
• Right to Rectification: You can request to correct any inaccurate or incomplete Data.
• Right to Erasure (Right to be Forgotten): You can request us to delete your Data under certain circumstances.
• Right to Restriction of Processing: You can restrict the processing of your Data in specific situations.
• Right to Data Portability: You can request to receive your Data in a structured format and transmit it to another controller.
• Right to Object: You can object to the processing of your Data for direct marketing purposes.

Exercising Your Rights

You can exercise any of these rights by contacting us at the details provided below. We will respond to your request within one month of receipt.

Data Security

We implement appropriate technical and organizational measures to protect your Data from unauthorized access, disclosure, alteration, or destruction. However, no internet transmission is completely secure.

Children’s Privacy

Our Site is not directed towards children under 13. We do not knowingly collect Data from children under 13. If you are a parent or guardian and believe your child has provided us with Data, please contact us for immediate removal.

Complaints

If you have any concerns about our Data practices, you can lodge a complaint with a supervisory authority in your EEA member state.

Changes to this Policy

We may update this Policy from time to time. We will notify you of any changes by posting the updated Policy on the Site.

Contact Us

If you have any questions regarding this Policy or your Data, please contact us at:

• Email: [email protected]
• Phone: +44 7852484157

Additional Notes

• This Policy is designed to comply with the GDPR and may be supplemented by additional terms specific to your location.
• Consider appointing a Data Protection Officer (DPO) if required by your processing activities.