How Data Protection Laws Protect You
The Data Protection Act 1998 and the 2018 General Data Protection Regulation (GDPR) describes how organisations — including Clever Association — must collect, handle and store personal information. Data protection laws states we are only able to process personal data if we have a valid reason to do so. They also state any personal data must be collected and used fairly, stored safely and not disclosed unlawfully. All company that processes, stores and has access to personal data, have to abide by these laws.
What Personal Data is Collected
Reasons for Collecting Personal Data
We do not collect and hold any personal data that isn’t applicable to that individual. Any and all information we collect and store has been provided by that individual either verbally, electronically or physically. The purpose for collecting and storing personal data may include, but is not limited to: • keeping in contact with the client before, during and after work has commenced • to update the client on the works and site progress • to keep a record of work carried out within a property in case the client ever wishes to update, change or maintain the technology systems • for maintenance purposes • to deliver equipment to site • to record equipment in case there are ever any issues with equipment or the equipment needs updating etc. • to facilitate a ‘credit’ in the event of a sum of money needing to be transferred.
Do we Share Your Personal Information?
Any and all personal data we hold will not be sold, distributed or leased for any such purposes such as marketing or advertising. We work closely with a number of third parties’ platforms to assist and provide us with certain services. e.g. accountancy software, networking analysis tools used to fault find and support systems remotely, task management suites etc. All partners and platforms used are selected on the basis they are compliant with the latest data protection legislations and do not sell, distribute or lease your personal information. We do restrict the information we input onto these platforms to reduce the risk of a data breach and to ensure you as an individual cannot be identified. We may share your personal data if we are under a duty to disclose data in order to comply with any legal obligation or to protect the rights, property, or safety of Clever Association, our customers, or others. This includes but is not limited to exchanging information with other companies and organisations for the purposes of fraud protection, credit risk reduction and dispute policies. However, we will take steps with the aim of ensuring that your privacy rights continue to be protected. All information you provide to us is stored on secure servers within the EEA. From time to time, your information may be transferred to and stored in a country outside the EEA in relation to provision of the services. The laws in these countries may not provide you with the same protection as in the EEA; however, any third party referred to above outside of the EEA has agreed to abide by European levels of data protection in respect of the transfer, processing and storage of any personal data. By providing your data to us, you agree to this transfer and storage. However, we will ensure that reasonable steps are taken to protect your data in accordance with this privacy notice.
Securing personal data
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure all information. Clever Association will securely store all personal data until asked by that individual to erase that data.
All individuals’ have the right to: • be informed • access personal data • rectify personal data • have data erased • restrict processing of certain data • authorise or refuse data portability • object to the storage or collection of data • not be the subject of automated decision making, including profiling If you wish to invoke any of the above rights relating to your personal data then please contact Clever Association by emailing firstname.lastname@example.org or calling 01423 861166. The Clever Association data protection officer will be in touch and will resolve the problem within 30 days. We will not release any personal information without two forms of ID being provided. As already stated, we do not collect and hold any personal data that isn’t applicable to that individual. If you wish to erase personal data, object or restrict how personal data is collected and used, it may limit our ability to carry out works and provide a high level of customer service. If you are unhappy with how the company is processing your personal data you may, contact the Information Commissioner’s Office (ICO). www.ico.org.uk.