1 - Who is responsible for your personal data? Garraway is the controller of and responsible for your personal data.
2 - What personal data do we collect? We may collect the following personal data from you:
This personal information may, from time to time, include personal data about your membership of a profession or trade association and details of any criminal record you may have.
3 - How is your personal data collected? We may use different methods to collect data from and about you, including your voluntary provision of data when doing the following:
In some circumstances, we may collect personal data about you from third parties. These third parties may include your organisation, other organisations with whom you have dealings, government agencies, credit reporting agencies, an information or service provider or from a publicly available record.
4 - How and for which purposes will we use your personal data? We will only use your personal data when the law allows us to do so. Most commonly, we will use your personal data in the following circumstances:
In addition, the processing may be based on your consent where you have expressly given that to us.
We may use your personal data for the following purposes only (being permitted purposes):
Where required, we will only send you marketing communications where you have opted-in and will provide you with the opportunity to opt-out at anytime if you no longer wish to receive marketing communications from us.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.
We will not use your personal data for taking any automated decision affecting you or creating profiles other than described above.
We may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
5 - With whom will we share your personal data? We may share your personal data with the following parties and in the following circumstances:.
We will otherwise only disclose your personal data when you direct us or give us permission to do so, when we are required by applicable law or regulation to do so, or as required to investigate actual or suspected criminal of fraudulent activities.
We will not share your personal data with any company outside the Garraway group of companies for marketing purposes unless we first obtain your express opt-in consent.
6 - International transfers of personal data We do not transfer your personal data outside the European Economic Area unless required to do so by applicable law or regulation.
7 - Keeping personal data secure We will take appropriate technical and organisational measures to keep your personal data confidential and secure in accordance with our internal procedures covering the storage, disclosure of and access to personal data. Personal data may be kept on our IT systems, those of our contractors and service providers or in paper files.
8 - For how long will we retain personal data? We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory accounting, or reporting requirements, or until you withdraw your consent (where applicable), and provided that in each case we are not legally required or otherwise permitted to continue storing such data.
9 - Your rights Under certain circumstances and subject to certain legal conditions, you have the right:
You may also make a complaint if you have a concern about our handling of your personal data.
If you wish to exercise any of the rights set out above or make a complaint, please send an email to firstname.lastname@example.org. We may request specific information from you to confirm your identity, in order for us to comply with our security obligations and to prevent unauthorised disclosure of data. You will not usually have to pay a fee to access your personal data, but we reserve the right to charge you a reasonable administrative fee for (or we may refuse to comply with) any manifestly unfounded or excessive requests or any additional copies of the personal data you request from us.
We will respond to all legitimate requests in a timely manner. If you are not satisfied with our response, you may take your complaint to the Information Commissioner’s Office, the UK supervisory authority for data protection issues (www.ico.org.uk).
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data (including your email address) changes during your relationship with us or if you wish to cancel any request you have made of us, by sending an email to email@example.com. We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us.