This Privacy Notice explains how Business Control Solutions plc (‘the Company‘) handles and uses information (both hard copy and electronic) it collects about you. This notice is non-contractual and can be amended at any time.
The Company is a “data controller”. This means that the Company is responsible for deciding how to hold and use personal information about you. The Company’s address is Ground Floor, Churchgate, Peterborough, PE1 1TT.
The Company will comply with the data protection principles set out in the law when handling your personal information. Overall responsibility for monitoring compliance with data protection sits with the Data Protection Officer, whose contact details are firstname.lastname@example.org.
1. What type of information does the Company hold?
- “Personal data or information”: this means any information about an individual from which that person can be identified. It does not include data where the individual’s identity has been removed (anonymous data).
- “Special category data”: this means data about an individual of a more sensitive nature and requires a higher level of protection.
2. On what basis does the Company process your personal information?
The Company will only use your personal information when permitted by the law. Most commonly, the Company will rely on the following legal bases when using your personal information:
- Where it needs to perform the contract it has entered into with you (*).
- Where it needs to comply with a legal obligation (**).
- Where it is necessary for the Company’s legitimate interests (or those of a third party) and your
interests and fundamental rights do not override those interests (***).
- Where you have provided consent (****).
We have indicated by asterisks in section 3 below the legal bases on which the Company processes your personal information. Some of the legal bases for processing will overlap and there may be several legal bases which justify the Company’s use of your personal information.
3. What personal information does the Company process?
The Company processes personal information, including basic personal information such as your name, title, job title, employer name, business contact details, business mailing address, job title and department (* and ** and ***and ****).
4. How is your information used by the Company?
The Company will use your personal information for the following purposes (this list is not exhaustive):
- Delivering consulting or software services;
- Undertaking business development activities; and
- Ensuring compliance with legal requirements and obligations to third parties.
5. What happens if you fail to provide personal information?
Where the provision of your personal data is required for the Company to enter into or carry out the performance of a contract with you or undertake business development activities, refusal to provide this personal information will prevent the Company from being able to offer its services.
6. Will you be subject to automated decision making?
Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making unless the Company has a lawful basis for doing so and it has notified you.
7. Who will your personal information be disclosed to?
The Company will occasionally share data with trusted third parties, for example, IT service providers or payment processors. The Company only permits third parties to process your personal data for specified purposes and in accordance with its instructions. The Company requires third parties to respect the security of your data, to take appropriate security measures and to treat it in accordance with the law.
8. Will your personal data be transferred to third parties outside of the European Economic Area?
The Company may transfer personal data about you outside of the EEA. No personal information will be transferred outside of the EEA, unless the Company is certain that an adequate level of protection exists in relation to the processing of that information (e.g. EU Model Clauses).
9. How long will the Company use your information for?
The Company will only retain your personal information for as long as is necessary to fulfil the purposes it collected the personal information for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For further information on the Company’s retention of your information, please ask for a copy of the Data Protection
Policy from email@example.com.
10. What are your rights relating to your personal information?
Under certain circumstances, by law you have the right to:
- Request access to your personal information (commonly known as a “data subject access request”).
- Request correction of the personal information that the Company holds about you.
- Request the erasure of your personal information.
- Request the restriction of and objection to processing of your personal information.
- Request the transfer of your personal information to a third party.
Request the withdrawal of your consent for processing.
Some of these rights are not automatic, and the Company reserves the right to discuss with you why it might not comply with a request.
If you want to exercise any of the above rights, please contact the Data Protection Officer in writing at firstname.lastname@example.org.
11. Who can you contact if you have concerns about the Company’s use of your personal information?
You retain the right at all times to lodge a complaint about the Company’s management of your personal data with
the Information Commissioner’s Office at https://ico.org.uk/concerns/.
If you have any concerns or queries about the Company’s use of your personal data, please contact the Data
Protection Officer in writing at email@example.com.