At DGP PLC we are committed to protecting and respecting your privacy. This policy sets out the basis on which any Personal Data we collect throughout our relationship with you, will be processed by us. Please read this privacy notice carefully to understand your rights and our views and practices regarding your Personal Data. For the purpose of data protection legislation, the data controller is DGP PLC of Station House, Station Road, Southfleet, Kent, DA13 9PA. This policy is overseen by the Data Protection Officer (“DPO”). If you have any queries, complaints or requests please contact the DPO at dpo@dgpplc.com or 01474 833388. This notice effective from the 25th May 2018.
What information do we collect from you?
We will collect and process the following data about you:
Information you give us. This is information about you that you give us directly. You may do this by filling in forms on our website or by corresponding with us by phone, email or otherwise. Information you send to us may be stored and processed by DGP PLC. This will include any emails or other electronic messages and any documents, photos or other files stored on or processed through our systems or devices. Please be aware that by entering information onto these systems you are sharing that information with DGP PLC.
Information we collect throughout our relationship. We will collect information throughout your time with us. This may include information about location, employees, projects, working hours and other relevant information.
The type of information we collect. This may include, but is not limited to the following (and may include Special Categories of Personal Data as defined below):
Why do we collect this information?
We use this information in the following ways:
Information you give to us and that we collect. We process your Personal Data for the following reasons: Based on our legitimate interest to:
Based on performance of our contract with you, or in order to take steps at your request to enter into a contract with you, for example:
Pursuant to our legal obligations:
We may also process data on the basis of your consent or explicit consent.
Where we rely on your consent for processing this will be brought to your attention when the information is collected from you.
We may inform you of additional purposes for processing your information when that information is collected from you.
Information we receive from other sources.
See the ‘Who might we share your information with?’ section below for details of how we use information in conjunction with third parties.
We may inform you of additional purposes for processing your information when that information is collected from you.
How can you choose and control what information we send you?
You can choose whether you wish to receive promotional emails, SMS messages and telephone calls from DGP PLC by contacting our DPO at dpo@dgpplc.com or 01474 833388. We encourage you to keep your personal settings and personal data accurate and up to date.
How long do we keep hold of your information?
We only store your information for as long as is required for the purpose it was collected. Should you wish to have more information about how long we retain your data, please contact our DPO at: dpo@dgpplc.com or 01474 833388. Information stored generally on IT systems, such as email history, will be deleted regularly in line with our policies.
Automated decision making
Automated decision-making means making decision about you using no human involvement e.g. using computerised filtering equipment. No decision will be made about you solely on the basis of automated decision making (where a decision is taken about you using an electronic system without human involvement) which has a significant impact on you.
Who might we share your information with?
Where information is shared with third parties we will only share the information required for the purpose it is being shared. We will disclose your personal information to the relevant third party:
How your data is stored and kept secure?
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality. Details of these measures may be obtained from the DPO.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
We may transfer your data outside the European Economic Area (“EEA”). We will only do so if adequate protection measures are in place in compliance with data protection legislation. We use the following protection measures:
• Transferring to Commission approved countries;
• Using Commission approved model contractual clauses;
• Requiring companies to whom we transfer data to be signed up to appropriate certification; or
• Transferring when one or more of the conditions set out in Article 49 GDPR are met.
What are your rights?
You have the following rights. You can exercise these rights at any time by contacting the DPO. You can make a subject access request verbally or in writing. In order to deal with your request effectively, it would be helpful if you could contact the DPCM in the first instance. The DPO may be contacted in the following ways:
By post:
Data Protection Officer, DGP PLC, Station House, Station Road, Southfleet, Kent, DA13 9PA. By email: dpo@dgpplc.com By telephone: +44 (0)1474 833388
You have the right:
Should you have any issues, concerns or problems in relation to your data, or wish to notify us of data which is inaccurate, please let us know by contacting us using the contact details above. In the event that you are not satisfied with our processing of your Personal Data, you have the right to lodge a complaint with the relevant supervisory authority, which is the Information Commissioner’s Office (ICO) in the UK, at any time. The ICO’s contact details are available here: https://ico.org.uk/concerns/
What we ask of you
Keeping your information accurate and up to date. If your information changes for any reason, for example if you change your name, address, then you should inform us of the change as soon as possible so that we can ensure your information is kept accurate and up to date.
Business cards. If you issue business cards to us your data will be processed by those who you share the business cards with. It is reasonably expected that the data will only be processed by those you share it with for business purposes, principally, to contact you in relation to your role and your business.
Definitions
Personal Data: Any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier, such identifiers including name, location data or online identifier.
Special Categories of Data includes data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
Changes to our privacy policy
This policy may be updated from time to time. Please check this page on our website for any changes.
Contact us
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to: Data Protection Officer, DGP PLC, Station House, Station Road, Southfleet, Kent, DA13 9PA.
or email dpo@dgpplc.com
or you can call us on +44 (0)1474 833388