Data Protection

Data Processing Practices

At Kinky Amsterdam, we prioritize the privacy and protection of personal information. Our data processing practices adhere to the stringent guidelines established by the European Union's General Data Protection Regulation (GDPR). We collect personal data only for specific, legitimate purposes, ensuring that such data is processed lawfully, fairly, and transparently. The information we gather is limited to what is necessary in relation to the purposes for which they are processed. We maintain the accuracy of the data and ensure it is kept up to date, erasing or rectifying any inaccuracies without delay.

Our commitment to data minimization means that personal data we collect is adequate, relevant, and limited to what is necessary for the intended purposes. We implement appropriate technical and organizational measures to secure personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. We also uphold the rights of individuals, including the right to access, rectify, and erase their personal data in accordance with GDPR requirements.

Lawful Basis for Data Collection

The lawful basis for processing personal data at our company includes the necessity for the performance of a contract, compliance with legal obligations, and the pursuit of legitimate interests, provided these do not override individual rights and freedoms. We also obtain explicit consent from data subjects where required. Our commitment to transparency ensures that individuals are fully informed about the purposes of data collection and the legal bases for such collection.

Personal data may be shared with third parties only when required by law or when such sharing is necessary for providing services to our clients. We ensure that appropriate safeguards are in place to protect any data shared with third parties, adhering to the principles of necessity and proportionality in data sharing practices.

Data Retention and Management

We are dedicated to maintaining the security and confidentiality of personal data. Our data retention policy ensures that personal data is kept only as long as necessary for the purposes for which it is processed. We perform regular reviews of the data we hold and securely delete or anonymize data that are no longer needed. We maintain detailed records of data processing activities in accordance with GDPR, ensuring accountability and compliance. Data subjects are informed about their data retention rights and can exercise their rights to access, rectify, and erase personal data.

To enhance the security of personal data, we utilize a variety of technical and organizational measures, including encryption, firewalls, and access controls. We provide regular training to our employees to ensure awareness of data protection responsibilities. Any data breaches are promptly dealt with in accordance with our established procedures, which include notifying relevant authorities and affected individuals if necessary.

Contact Information for Privacy Concerns

If you have any concerns or questions regarding our data processing practices or wish to exercise your data protection rights, please contact our data protection officer, Bennett Thorne, at [email protected]. Our postal address is 590 W Georgia St, Vancouver, BC V6E 1A3, Canada. We strive to address all inquiries promptly and efficiently, providing comprehensive support to individuals exercising their data protection rights. Our team is committed to upholding the principles of transparency, fairness, and accountability in all data protection matters.