dusk-stone
Home About Services Contact

GDPR Compliance

Last updated: May 22, 2026

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organizations processing personal data of individuals in the European Union. At dusk-stone, we are committed to full compliance with GDPR requirements.

Our Commitment to Data Protection

We process personal data lawfully, fairly, and transparently. Our data handling practices are designed to respect your rights and protect your information throughout its lifecycle.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you provide explicit consent for specific processing activities
  • Contract Performance: To fulfill our contractual obligations when you engage our services
  • Legal Obligation: To comply with applicable laws and regulations
  • Legitimate Interests: To operate our business effectively while ensuring your rights are protected

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to obtain confirmation of whether we process your personal data and to access that data. We will provide a copy of your personal data upon request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion of that information.

Right to Erasure (Right to be Forgotten)

Under certain circumstances, you have the right to request deletion of your personal data. We will comply unless we have a legitimate reason to retain the information.

Right to Restriction of Processing

You can request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significant effects.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us using the following details:

Email: [email protected]
Subject line: GDPR Rights Request

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of any such extension.

Data Protection Officer

For questions about our data protection practices or to exercise your rights, you may contact our data protection team at [email protected].

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication procedures
  • Employee training on data protection
  • Incident response and breach notification procedures

International Data Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by the European Commission
  • Adequacy decisions confirming appropriate protection levels
  • Binding corporate rules where applicable

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Duration of our business relationship
  • Legal retention requirements
  • Legitimate business purposes (e.g., warranty obligations)
  • Statute of limitations periods

Third-Party Processors

We work with carefully selected third-party processors who assist in our operations. All processors are bound by data processing agreements that ensure GDPR compliance and appropriate security measures.

Children's Data

We do not knowingly collect or process personal data from individuals under 18 years of age. If we become aware of such data, we will delete it promptly.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. In the UK, the relevant authority is:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We will notify you of any material changes through our website.

Contact Information

For questions about GDPR compliance or to exercise your rights:

dusk-stone
142 Kingsway
Holborn
London WC2B 6NH
United Kingdom
Email: [email protected]

dusk-stone

Building resilient energy systems for organizations that can't afford downtime.

Services

  • Distributed Energy
  • Smart Grid Integration
  • Hybrid Storage
  • Energy Audits

Company

  • About Us
  • Contact
  • Privacy Policy
  • Terms of Use

Legal

  • GDPR Compliance
  • Cookies Policy

© 2026 dusk-stone. All rights reserved.