GDPR Compliance
Ospreys Exim complies with applicable data protection regulations including GDPR. This notice applies to individuals in the EEA, the UK, and other persons whose personal data is protected by the GDPR (EU) 2016/679 or UK GDPR in relation to our processing activities.
Controller
OSPREYS EXIM PRIVATE LIMITED, a Private Limited Company operating as Ospreys Exim, connect@ospreys-exim.com, Registered Address as above. GSTIN: 07AAECO6230B1ZW.
Data We Process
Identity, business contact, enquiry, transaction, technical, communications, and cookie-related data as described in the Privacy Policy.
Purposes and Legal Bases
Purposes: responding to enquiries/business requests; preparing quotations and contract discussions; performing contracts and managing transactions; supplier/customer/compliance due diligence; security, fraud prevention, internal administration; lawful marketing and relationship management; compliance with legal obligations.
Legal bases:
- Consent (Art. 6(1)(a)) for email/WhatsApp business communications, non-essential cookies, marketing — freely given, specific, informed, unambiguous, withdrawable.
- Legitimate interests (Art. 6(1)(f)) for responding to B2B enquiries, maintaining relationships, website analytics, fraud prevention, with a balancing test.
- Contractual necessity (Art. 6(1)(b)).
- Legal obligation (Art. 6(1)(c)).
Your GDPR Rights
- be informed (Arts. 13–14);
- access (Art. 15);
- rectification (Art. 16);
- erasure (Art. 17);
- restriction (Art. 18);
- data portability (Art. 20);
- object, including to direct marketing — processing ceases immediately on objection to direct marketing (Art. 21);
- withdraw consent any time without affecting prior lawful processing (Art. 7(3));
- not be subject solely to automated decision-making with legal/similarly significant effects (Art. 22).
How to Exercise Your Rights
connect@ospreys-exim.com. We respond within thirty (30) days; complex/high-volume requests may extend by a further sixty (60) days with notice. Identity verification may be required.
International Transfers
EU/EEA/UK personal data may be transferred to India and other countries where our operations/partners/providers are located, relying on Standard Contractual Clauses (Decision 2021/914); adequacy decisions where applicable; other Article 46 safeguards including binding corporate rules where applicable; and supplementary measures where appropriate. Request a copy of safeguards via connect@ospreys-exim.com.
Data Protection Contact
EU / GDPR Privacy Contact, connect@ospreys-exim.com.
Complaints
You may lodge a complaint with your local data protection authority in the EEA or UK.
Automated Decision-Making
We do not engage in automated decision-making or profiling producing legal or similarly significant effects on EU/EEA/UK individuals.