This contract is between you, the data subject, and Dawson & Walsh Limited.
Your privacy is important to us and we take it very seriously. We want to help everyone who uses our services to get the most out of them. The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a new regulation which replaces the Data Protection Regulation (Directive 95/46/EC). The Regulation aims to harmonise data protection legislation across EU member states, enhancing privacy rights for individuals and providing a strict framework within which commercial organisations can legally operate. Even though the UK has expressed its intention to leave the EU in March 2019, the GDPR will be applicable in the UK from 25th May 2018. Furthermore, the Information Commissioner's Office (ICO) has recently laid out its intention to continue with a similar level of regulation post March 2019.
The policy below lays out in simple English how the GDPR applies to the way Dawson & Walsh Limited (Dawson & Walsh) handles your personal data. Our aim is to be responsible, relevant and secure when using your data. Please take a moment to read through what information we collect about you, who we share it with and how they might use it.
The Data Controller is Dawson & Walsh Limited. It is registered in the UK Company Number 06553009.
The registered address is Aldgate Tower, 2 Leman Street, London, E1 8FA.
The Data Controller's representative is the Director of Data Protection.
You can contact them by email at privacy[at]dawsonandwalsh.co.uk
You can call them on 0845 301 1185.
The categories of personal data collected are your name, your job title, your company name, your company address, your business email and your CV.
Personal Data may also include a link to a professional profile including a photograph if one is available in the public domain e.g. LinkedIn, Twitter, Business Facebook or Corporate Website.
No links to personal or private websites – even if they are in the public domain will be collected, stored or processed.
Dawson & Walsh will rely on Article 6(1)(f) GDPR as a lawful basis for processing your personal data.
Article 6 (1)(f): 'processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental right and freedoms of the data subject which require protection of Personal data, in particular where the data subject is a child'.
Specifically, Recital 47 affirms direct marketing as a legal basis for processing by the Controller or Third Party provided that the interests or the fundamental rights and freedoms of the data subject are not overridden.
Recital 47: The legitimate interests of a controller, including those of a controller to which the Personal data may be disclosed, or of a third party, may provide a legal basis for processing, provided that the interests or the fundamental rights and freedoms of the data subject are not overriding, taking into consideration the reasonable expectations of the data subject based on their relationship with the controller'.
'The processing of personal data for direct marketing purposes maybe regarded as carried out for a legitimate interest'.
Dawson & Walsh undertake to balance the rights of the individual data subject, taking into consideration the reasonable expectations of data subjects and the provision of Recital 47.
By continuing to receive newsletters and/or visit our websites you are agreeing that you understand and accept this as a valid legal basis for processing your personal data.
Dawson & Walsh Limited: All of our employees and data processors that have access to, and are associated with, the processing of your personal information are legally obliged to respect the confidentiality of your data and are bound by contract to do so. It may be necessary for the purposes of delivering digital communication to share personal data with technology platforms e.g. mail servers. We guarantee to only to use suppliers who meet the GDPR standards.
Dawson & Walsh has advised all parties that at this current time no personal data will be transferred outside of the UK.
The Retention period for data is 10 years from the signup date or sooner if you choose it. We have chosen 10 years because that is the average amount of time a professional in the UK remains in post. All Data Controllers will be required to deactivate personal data if instructed to do so. The data subject has the right to change their mind and withdraw consent at any point during the retention period. Article 21(4) – ‘Right to Object'.
Dawson & Walsh confirms the following rights to each Data Subject:
Personal data shall be processed in accordance with Principle 6 of the rights of data subjects under The Regulation.
The right of access to a copy of the information comprised in their personal data. To obtain a copy of the personal information we keep about you please send your request to the Data Controller, Dawson & Walsh Limited, Aldgate Tower, 2 Leman Street, London, E1 8FA. We will provide you with a copy of the personal data we keep (at no charge) within 40 days. We will, however, require proof of identity.
The right to object to processing that is likely to cause or is causing damage or distress.
The right to prevent processing for direct marketing.
The right to object to decisions being taken by automatic means.
The right to have inaccurate personal data rectified, blocked, erased or destroyed.
The right to make a complaint to a supervisory body.
Any changes we may make to our privacy notice in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy notice.
Questions, comments and requests regarding this privacy notice are welcomed and should be addressed to the Data Controller, Dawson & Walsh Limited, Aldgate Tower, 2 Leman Street, London, E1 8FA or via email at privacy[at]dawsonandwalsh.co.uk