GDPR Compliance

Last updated: 4/10/2025

Our Commitment to GDPR

At Safari Luxe, operated by Dusatu Group, we are committed to ensuring the privacy and protection of your personal data in compliance with the European Union General Data Protection Regulation (GDPR).

This page outlines how we implement GDPR principles in our business operations and what rights you have regarding your personal data.

GDPR Principles We Follow

We adhere to the following GDPR principles when processing your personal data:

  • Lawfulness, fairness, and transparency: We process your data lawfully, fairly, and in a transparent manner.
  • Purpose limitation: We collect your data for specified, explicit, and legitimate purposes and do not process it in a manner incompatible with those purposes.
  • Data minimization: We limit our data collection to what is necessary for the purposes for which it is processed.
  • Accuracy: We take reasonable steps to ensure your personal data is accurate and kept up to date.
  • Storage limitation: We keep your data in a form that permits identification only for as long as necessary for the purposes of processing.
  • Integrity and confidentiality: We process your data in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage.
  • Accountability: We are responsible for and can demonstrate compliance with all the above principles.

Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

  • Right to be informed: You have the right to know how we collect and use your personal data.
  • Right of access: You have the right to request a copy of the personal data we hold about you.
  • Right to rectification: You have the right to have inaccurate personal data corrected or completed if it is incomplete.
  • Right to erasure (right to be forgotten): You have the right to request the deletion of your personal data in certain circumstances.
  • Right to restrict processing: You have the right to request the restriction or suppression of your personal data in certain circumstances.
  • Right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
  • Right to object: You have the right to object to the processing of your personal data in certain circumstances.
  • Rights related to automated decision making and profiling: You have rights related to automated individual decision-making and profiling.

How to Exercise Your Rights

To exercise any of your rights under GDPR, please contact us using the following details:

Dusatu Group
Grenadierów 13/210
Lublin, Poland
Email: office@dusatu.com
Phone: +48 780 167 731

We will respond to your request within one month of receipt. This period may be extended by two further months where necessary, taking into account the complexity and number of requests.

Data Protection Officer

While not legally required for our organization size, we have appointed a Data Protection Officer (DPO) to oversee our data protection strategy and ensure compliance with GDPR requirements:

Data Protection Officer
Dusatu Group
Email: dpo@dusatu.com

Data Breach Notification

In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals.

If the breach is likely to result in a high risk to the rights and freedoms of individuals, we will also notify the affected individuals without undue delay.

International Data Transfers

As a company based in Poland (EU), we may transfer your data to countries outside the European Economic Area (EEA). When we do so, we ensure that appropriate safeguards are in place to protect your data, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Binding Corporate Rules
  • Adequacy decisions by the European Commission

Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for processing operations that are likely to result in a high risk to the rights and freedoms of individuals, particularly when using new technologies.

Contact Us

If you have any questions about our GDPR compliance or how we handle your personal data, please contact us:

Dusatu Group
Grenadierów 13/210
Lublin, Poland
Email: office@dusatu.com
Phone: +48 780 167 731