GDPR

Introduction:

Meant To Be Properties ("we," "us," or "our") is committed to ensuring compliance with the General Data Protection Regulation (GDPR) and protecting the privacy and rights of individuals regarding their personal data. This GDPR documentation outlines our policies and procedures for handling personal data in accordance with GDPR requirements.

Data Controller:

Meant To Be Properties acts as the data controller for the personal data collected and processed in connection with our services. As the data controller, we determine the purposes and means of processing personal data.

Legal Basis for Processing:

We process personal data based on one or more of the following legal bases as outlined in Article 6 of the GDPR:

Consent: We may process personal data with the individual's consent for specific purposes.
Contractual Necessity: We process personal data necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract.
Legal Obligation: We process personal data to comply with legal obligations, such as anti-money laundering (AML) checks and regulatory requirements.
Legitimate Interests: We may process personal data for our legitimate interests, provided that such processing is not overridden by the interests or fundamental rights and freedoms of the data subjects.

Rights of Data Subjects:

Under the GDPR, data subjects have the following rights regarding their personal data:

Right to Access: Data subjects have the right to access their personal data and obtain information about how it is being processed.
Right to Rectification: Data subjects have the right to request the correction of inaccurate or incomplete personal data.
Right to Erasure: Data subjects have the right to request the deletion of their personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing: Data subjects have the right to request the restriction of processing of their personal data under certain circumstances, such as when the accuracy of the data is contested.
Right to Data Portability: Data subjects have the right to receive their personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
Right to Object: Data subjects have the right to object to the processing of their personal data under certain circumstances, such as for direct marketing purposes.

Right to Withdraw Consent:

If processing is based on consent, data subjects have the right to withdraw their consent at any time.

Data Security Measures:

We implement appropriate technical and organisational measures to ensure the security of personal data and protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

Encryption of personal data
Access controls and restrictions
Regular security assessments and audits
Employee training on data protection and security
Incident response and breach notification procedures

Data Transfers:

We may transfer personal data to third parties or service providers located outside the European Economic Area (EEA) only if adequate safeguards are in place to ensure the protection of personal data in accordance with GDPR requirements. These safeguards may include the use of standard contractual clauses or adherence to an approved certification mechanism.

Data Retention:

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. We have established retention periods based on the purposes for processing and legal requirements.

Contact Information:

If you have any questions, concerns, or requests regarding our GDPR compliance or the handling of your personal data, please contact our Data Protection Officer (DPO) at: Contact@meant-to-be-properties.com

Updates to GDPR Documentation:

We may update this GDPR documentation from time to time to reflect changes in our data processing practices or legal requirements. Any updates will be communicated to data subjects as required by law.