Last Updated: September 2026
dawn-swan is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This page outlines how we handle your personal data in accordance with GDPR requirements.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent for specific processing activities
- Contractual necessity: When processing is necessary to fulfill our service obligations
- Legitimate interests: When processing serves our legitimate business interests while respecting your rights
- Legal obligation: When required to comply with applicable laws
Your GDPR Rights
Under the GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data.
Right to Rectification
You can request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure (Right to be Forgotten)
You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You can request that we limit the processing of your personal data in specific situations.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
Right to Object
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us at:
Email: [email protected]
Subject line: GDPR Request
We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of any such extension.
Data Processing Activities
What Data We Collect
- Contact information (name, email address)
- Vehicle information (make, model, year)
- Service requests and preferences
- Communication records
- Website usage data (anonymized)
Why We Process Your Data
- To provide requested services
- To communicate with you about your requests
- To improve our services
- To comply with legal obligations
How Long We Keep Your Data
We retain personal data only as long as necessary for the purposes outlined or as required by law. Specific retention periods depend on the type of data and the purpose of processing.
Data Security Measures
We implement appropriate technical and organizational security measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
- Incident response procedures
International Data Transfers
If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
Data Protection Officer
For questions about our data protection practices or to exercise your GDPR rights, you may contact our data protection team at [email protected].
Updates to This Information
We may update this GDPR compliance information periodically. Changes will be posted on this page with an updated date. We encourage you to review this page regularly.
Additional Resources
For more information about how we handle your personal data, please refer to our Privacy Policy.