1. Scope
All data subjects whose personal data is collected, in line with the requirements of the GDPR.
2. Responsibilities
2.1 The Data Protection Officer is responsible for ensuring that this notice is made available to data subjects prior to OutStand collecting/processing their personal data.
2.2 All Employees/Staff of OutStand who interact with data subjects are responsible for ensuring that this notice is drawn to the data subject’s attention and their consent to the processing of their data is secured.
3. Privacy notice
3.1 Who are we?
OutStand provide a name badge and event registration service. Our registered office is at 50 Havelock Street, Canterbury, Kent CT1 1NP
Our Data Protection Officer can be contacted directly here:
· claire@outstand.co.uk
· 07946 622787
The personal data we would like to collect from you and process on you is:
|
Personal data type: |
Source: |
|
Customers: Title, name, surname, job title, company, address, email address, phone number, mobile number |
Direct from customers when they first contact us with an enquiry either in person, online or by email |
|
Staff: Title, name, surname, job title, company, address, email address, phone number, mobile number, bank account details, NI number |
On recruitment |
|
Suppliers: Title, name, surname, job title, company, address, email address, phone number, mobile number |
Direct from suppliers |
|
Customers clients: Name, surname, job title, company name |
From the data controller for the company responsible for requesting that name badges are printed |
The personal data we collect will be used for the following purposes:
· If you are a customer or a supplier, to communicate with you and provide you with information that you have requested, process your orders and manage your bookings
· If you are an employee, to carry out tasks as agreed or to comply with legislation
· If you are a customer’s client, to produce name badges and assist in providing event attendance reports
Our legal basis for processing for the personal data:
· For the performance of a contract or agreement
· Your consent
· Legitimate interest
Any legitimate interests pursued by us, or third parties we use, are as follows:
· For employment data processing
· For account management and direct marketing
· To comply with law enforcement and regulatory bodies
We do not collect or process special categories of personal data.
Our services are not aimed at children.
3.2 Consent
By consenting to this privacy notice you are giving us permission to process your personal data specifically for the purposes identified.
Consent is required for OutStand to process both types of personal data, but it must be explicitly given. Where we are asking you for sensitive personal data we will always tell you why and how the information will be used.
You may withdraw consent at any time by emailing claire@outstand.co.uk specifying that you no longer consent to your personal data being processed by OutStand
3.3 Disclosure
OutStand will not pass on your personal data to third parties for them to use for marketing purposes.
3.4 Retention period
OutStand will process personal data for as long as there is an ongoing relationship and will store the personal data for as long as is necessary for the purposes that we are using it. How long we keep it depends on the purpose it is used for.
3.5 Your rights as a data subject
At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:
· Right of access – you have the right to request a copy of the information that we hold about you.
· Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
· Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
· Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
· Right of portability – you have the right to have the data we hold about you transferred to another organisation.
· Right to object – you have the right to object to certain types of processing such as direct marketing.
· Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
· Right to judicial review: in the event that OutStand refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined in clause 3.6 below.
All of the above requests will be forwarded on should there be a third party involved in the processing of your personal data.
3.6 Complaints
In the event that you wish to make a complaint about how your personal data is being processed by OutStand (or third parties as described in 3.4 above), or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and OutStand’s Data Protection Officer.
The details for each of these contacts are:
|
Supervisory authority contact details |
[Data Protection Officer (DPO)] / [GDPR Owner] contact details |
|
|
Contact Name: |
Information Commissioner’s Office (ICO) |
Claire Graham |
|
Address line 1: |
Wycliffe House |
OutStand |
|
Address line 2: |
Water Lane |
50 Havelock Street |
|
Address line 3: |
Wilmslow |
Canterbury |
|
Address line 4: |
Cheshire |
Kent |
|
Address line 5: |
SK9 5AF |
CT1 1NP |
|
Email: |
claire@outstand.co.uk |
|
|
Telephone: |
0303 123 1113 |
07946 622787 |