NEW DATA PROTECTION REGULATION PRIVACY NOTICE – DOWSABILITY
What does it mean for you?
The new General Data Protection Regulation (GDPR) comes into effect from 25 May 2018.
Automated decision making
This doesn’t mean I’ll start to send you direct marketing as I’ll only contact you according to your preferences.
Your new Data Protection Statement
Your personal data is data which by itself or with other data available to me can be used to identify you. I am Dowsability. The data protection statement sets out how I’ll use your personal data. You can contact me at The Granary, Midelney, Langport TA10 0LU or firstname.lastname@example.org or 01458-250465 if you have any questions.
The types of data we collect and use
Whether or not you become or remain a customer, I’ll use your personal data for the reasons set out below and if you become a customer I’ll use them to manage my services. I’ll collect most of this directly during the application journey. The sources of personal data I use may include:
- Full name and personal details including contact information (eg. Home address and address history, email address, home and mobile telephone numbers);
Providing your personal data
I’ll tell you if providing some personal data is optional, including if I ask for your consent to process it. In all other cases you must provide your personal data so I can process your application (unless you’re a customer and I already hold your details).
Using your personal data: the legal basis and purpose.
I’ll process your personal data:
1. As necessary to perform my contract with you for the relevant service:
a. To manage and perform that contract
b. To update my records; and
2. As necessary for my own legitimate interests;
a. To monitor emails, calls, other communications and activities on your account;
b. For market research analysis and developing statistics; and
c. To send you marketing communications, including automated decision making relating to this.
3. As necessary to comply with a legal obligation, e.g
a. When you exercise your rights under data protection law and make requests; and
b. For compliance with legal and regulatory requirements and related disclosures;
4. Based on your consent, e.g.
a. To send you marketing communications.
You’re free at any time to change your mind and withdraw your consent. The consequence might be that I can’t do certain things for you.
Sharing of your personal data
Subject to applicable data protection law, I may share your personal data with:
- Courts, to comply with legal requirements;
- When I restructure or sell my business or its assets or have a merger or re-organisation;
- Payment systems; and
- Anyone else where I have your consent or where it is required.
Your marketing preferences
I’ll use your home address, phone numbers and email address to contact you according to your preference. You can change your preferences or unsubscribe at any time by contacting me*.
If you have previously told me that you don’t want information on other products and services, I will continue to respect your wishes.
Criteria used to determine retention periods (whether or not you become a customer).
The following criteria are used to determine data retention period for your personal data:
- Retention in case of queries. I’ll retain your personal data as long as necessary to deal with your queries and account.
Your rights under applicable data protection law
Your rights are as follows (noting that these rights don’t apply in all circumstances and that data portability is only relevant from May 2018).
- The right to be informed about my processing of your personal data;
- The right to have your personal data corrected if it’s inaccurate and to have incomplete personal data completed;
- The right to object to processing of your personal data;
- The right to restrict processing of your personal data;
- The right to have your personal data erased (the “right to be forgotten”);
- The right to request access to your personal data and information about how I process it;
- The right to move, copy or transfer your personal data (“data portability”); and
You have the right to complain to the information Commissioner’s Office. It has enforcement powers and can investigate compliance with data protection law: ico.org.uk.
*If you would like to unsubscribe from our mailing list please email email@example.com with your name and email address.