GDPR Compliance

Our Commitment to Data Protection

merry-wolf is committed to protecting the privacy and security of personal data. While we are a South African company, we respect the data protection standards established by the General Data Protection Regulation (GDPR) for visitors from the European Economic Area (EEA).

This page provides additional information about how we handle personal data in compliance with GDPR requirements.

Data Controller

merry-wolf acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.

Contact details:
Email: [email protected]
Address: 42 Jacaranda Lane, Sandton, Gauteng 2196, South Africa

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.

Right to Rectification

You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected or when you withdraw consent.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making systems.

Lawful Basis for Processing

We process personal data on the following legal bases:

• Consent: When you voluntarily provide information through our enquiry forms or subscribe to communications.
• Contract: When processing is necessary to provide services you have requested or to enter into a contract.
• Legitimate interests: When processing is necessary for our business operations, such as improving our services and website security.
• Legal obligation: When we are required to process data to comply with applicable laws.

International Data Transfers

As a South African company, personal data we collect may be stored and processed outside the EEA. When transferring data internationally, we implement appropriate safeguards to ensure your data receives adequate protection.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods depend on the type of data and the purpose of processing. Enquiry data is typically retained for 24 months unless you request earlier deletion.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the details below. We will respond to your request within one month. In complex cases, we may extend this period by two months, but we will inform you of any delay within the initial one-month period.

We may request specific information from you to confirm your identity before processing your request.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. EEA residents may contact their local data protection authority.

Contact for Data Protection Enquiries

For any questions or concerns about how we handle your personal data, please contact us at:

Email: [email protected]
Address: 42 Jacaranda Lane, Sandton, Gauteng 2196, South Africa