Privacy Policy TDA Draft v4 - investintorbay.comus via email, social media, phone, by contacting our staff, one of our partners or via CCTV or otherwise. This includes information

TDAisatradingnameofTorbayEconomicDevelopmentCompanyLimited,acompanyregisteredinEnglandandWalesNo.7604855.RegisteredOffice–TorHillHouse,UnionStreet,TorquayDevon,TQ25QW

TDAPrivacyPolicyLastmodified:30thApril2018.

TDA(“We”)arecommittedtoprotectingandrespectingyourprivacy.Wepromisetokeepyourdatasafeandprivate,nottosellyourdata,togiveyouwaystomanageandreviewyourdata.Thispolicysetsoutthebasisonwhichanypersonaldatawecollectfromyou,orthatyouprovidetous,willbeprocessedbyus.Pleasereadthefollowingcarefullytounderstandourviewsandpracticesregardingyourpersonaldataandhowwetreatit.ForthepurposeoftheGeneralDataProtectionRegulation(GDPR)(“theAct”)weareregisteredasaDataControllerwiththeInformationCommissioner’sOffice(RegistrationReferenceNoZA175198)andadescriptionofhowweusepersonalinformationisincludedinourentryonthedataprotectionregisterwhichismaintainedbytheInformationCommissioner’sOffice. InformationwemaycollectfromyouUnderGDPRwehavealegaldutytoprotectanyinformationwecollectfromyou.Wehaveproceduresandsecurityfeaturesinplacethataimtokeepyourdatasecureoncewereceiveit.Wemaycollectandprocessthefollowingdataaboutyou:

• Informationyougiveus.Youmaygiveusinformationbypaper,correspondingwithusviaemail,socialmedia,phone,bycontactingourstaff,oneofourpartnersorviaCCTVorotherwise.Thisincludesinformationyouprovidewhenyouvisitourwebsites,useourservices,andcorrespondwithus.Theinformationyougiveusmayincludeyourname,address,emailcontactdetails,phonenumber(s),andotherinformationrequiredbyustodeliverourservices.

• Informationwecollectaboutyou.Withregardtoeachofyourvisitstoourwebsiteswemayautomaticallycollectthefollowinginformation:

o Technicalinformation–cookies(pleaseseeourCookiePolicy),theInternetprotocol(IP)addressusedtoconnectyourcomputertotheInternet,browsertypeandversion,timezonesetting,browserplug-intypesandversions,operatingsystemandplatform

o Informationaboutyourvisittoourwebsites–productsyouviewedorsearchedfor,pageresponsetimes,downloaderrors,andlengthofvisit


LegalBasiswerelyonTheGDPRprotectionsetsoutanumberofdifferentreasonsforwhichacompanymaycollectandprocessyourpersonaldataincluding:Consent–inspecificsituations,wecancollectandprocessyourdatawithyourconsente.gwhenyoutickaboxtoreceiveemailnewslettersPerformanceofaContract–weneedyourpersonaldatatoenableustoperformacontractanddeliverourservicesLegalcompliance–Ifthelawrequiresusto,wemayneedtocollectandprocessyourdata–e.gwecanpassondetailsofpeopleinvolvedinfraudorothercriminalactivityordetailstoHMRCLegitimateinterest–inspecificsituations,werequireyourdatatopursueourlegitimateinterestinawaywhichmightreasonablybeexpectedaspartofrunningourbusinessandwhichdoesnotmateriallyimpactyourrights,freedomorinterests’e.gtocarryoutourmarketingactivitiesandseekingyourconsentwhenweneedtocontactyouWhydowecollectinformationaboutyou?Weneedtocollectandholdinformationaboutyou,foravarietyofreasonsincluding:▪ thedeliveryofourTDAservices▪ confirmingyouridentifytoprovidesomeservices▪ contactingyoubypost,emailortelephone▪ understandingyourneedstoprovidetheservicesthatyourequest▪ understandingwhatwecandoforyouandinformyouofotherrelevantservicesand

benefits▪ obtainingyouropinionaboutourservices▪ updatingyourcustomerrecord▪ helpingustobuildupapictureofhowweareperformingatdeliveringservicesto

youandwhatservicesareneeded▪ ProvidinginformationonourTDAservicesbywayofanewsletter▪ processingfinancialtransactions▪ preventinganddetectingfraudandcorruptionintheuseoffunds▪ makingsurewemeetourstatutoryobligationsincludingthoserelatedtodiversity

andequalities

Wemaynotbeabletoprovideyouwithaproductorserviceunlesswehaveenoughinformation,oryourpermissiontousethatinformation.

Howweuseyourinformation


WewillusetheinformationyouprovideinamannerthatconformstotheGDPRAct.Wewillendeavourtokeepyourinformationaccurate,uptodateandnotkeepitforlongerthanisnecessary.Insomeinstancesthelawsetsthelengthoftimeinformationhastobekept.Wewillprocessyourinformationforthefollowingpurposes:▪ tocarryoutourobligationsarisingfromanycontractsenteredintobetweenyouand

usandtoprovideyouwithinformation,productsandservicesthatyourequestfromus

▪ tomonitorandimprovetheTDA’sperformanceinrespondingtoyourrequest▪ toallowustobeabletocommunicatewithyouandprovideservicesandbenefits

appropriatetoyourneeds▪ toensurethatwemeetourlegalobligations▪ wherenecessaryforthelawenforcementfunctions▪ topreventanddetectfraudorcrime▪ toprocessfinancialtransactionsincludingpayments,orwhereweareactingon

behalfofothergovernmentbodies,e.g.DepartmentforWorkandPensions▪ tocollecttaxandmoniesowedtous▪ wherenecessarytoprotectindividualsfromharmorinjury▪ toallowthestatisticalanalysisofdatasowecanplantheprovisionofservices▪ forotherlegitimatebusinesspurposesHowweprotectyourinformationOuraimisnottobeintrusive,andwewon'taskirrelevantorunnecessaryquestions.Theinformationyouprovidewillbesubjecttorigorousmeasuresandprocedurestomakesureitcan'tbeseen,accessedordisclosedtoanyonewhoshouldn'tseeit.Wewillnotdiscloseyourpersonalinformationthatyouprovidetous,toanyoneelsewithoutyourpermission,exceptinthefewsituationswheredisclosureisrequiredbylaw,orwherewehavegoodreasontobelievethatfailingtosharetheinformationwouldputsomeoneelseatrisk.Youwillbetoldaboutthis.Wewillnotkeepyourinformationlongerthanitisneededtakingintoaccountthefollowing:

• Whetherwehaveanylegalobligationstocontinuetoprocessyourinformation(imposedbyrelevantlaworregulations)

• Thepurpose(s)anduseofyourinformationbothnowandinthefuture(suchaswhetheritisnecessarytocontinuetostorethatinformationsowecancontinuetoperformourobligationsunderacontractwithyouoracontractinthefuture)

• Wherewehavealegalbasistocontinuetoprocessinformation(suchasyourconsent)


• Howdifficultitistoensurethattheinformationcanbekeptuptodateandaccurate–and-

• Anyrelevantsurroundingcircumstances(suchathenatureandstatusofourrelationshipwithyou)

Wewillalwaysdisposeofpaperrecordsordeleteanyelectronicpersonalinformationinasecureway.WaysinwhichwecollectanduseinformationInformationSharingGenerally,wewilluseyourinformationwithintheTDAandwillonlyshareitoutsidetheTDAwhereweneedtoperformourservice,youhaverequesteditorgivenyourconsent.Wedousetrustedthirdparties–forexampleITcompanieswhosupportourwebsites,HMRevenue&Customs,fraudmanagement,andtoadministerourmailinglistfore-newsletterswithanorganisationcalledMailChimp.Ifyouhavepurchasedfromusandusedacreditordebitcardwithus,wewillsharetransactiondetailswithcompanieswhichhelpustoprovidethisservice(suchasVisaandMastercard).

Ifweuseproductsorserviceswhichprocesspersonalinformation,wewillonlyuseGDPRcompliantcompaniestohelpdeliverourservices,wewillonlyprovideinformationtheyneedtoperformtheirspecificserviceandwewillworkcloselywiththemtoensureyourprivacyisrespectedatalltimes.Theseprovidersareobligedtokeepyourdetailssecurely,andusethemonlytofulfillyourrequest.IfwedotransferanyinformationoutsidetheEuropeanEconomicArea(EEA)wewillensurethefollowingsafeguards:

• Transfertoanon-EEAcountrywithprivacylawsthatgivethesameprotectionastheEEA.

• PutinplaceacontractwiththerecipientthatmeanstheymustprotectthedatatothesamestandardsasintheEEA

• TransfertoorganisationsthatarepartofPrivacyShield.ThisisaframeworkthatsetsprivacystandardsfordatasentbetweentheUSandEUcountries.ItmakessurethosestandardsaresimilartowhatisusedintheEU.YoucanfindoutmoreaboutdataprotectionontheEuropeanCommissionJusticewebsite.

Wemaydiscloseinformationtootherpartnerswhereitisnecessary,eithertocomplywithalegalobligation,orwherepermittedunderGDPR.Whereweneedtodisclosesensitiveorconfidentialinformationsuchasmedicaldetailstootherpartners,wewilldosoonlywithyourpriorexplicitconsentorwherewearelegallyrequiredto.Wemaydiscloseinformationwhennecessarytopreventriskofharmtoanindividual.Atnotimewillyourinformationbepassedtoorganisationsexternaltousandourpartners,formarketingorsalespurposesorforanycommercialusewithoutyourpermission.


TelephoneCallsWewillinformyouifwerecordormonitoranytelephonecallsyoumaketousandobtainyourconsenttodoso.Thiswillbeused,toincreaseyoursecurity,forourrecordkeepingofthetransactionandforourstafftrainingpurposes.EmailsPleaserememberthattransmissionofinformationovertheinternetisnotsecureandifyousubmitanyinformationtousovertheinternet(suchasemails,orviaourwebsite(s)orbyanyothermeansyoudosoatyourownrisk.Ifyouemailuswemaykeeparecordofyourcontactandyouremailaddressandtheemailforourrecordkeepingofthetransaction.Forsecurityreasonswewillnotincludeanyconfidentialinformationaboutyouinanyemailwesendtoyou.Wewouldalsosuggestthatyoukeeptheamountofconfidentialinformationyousendtousviaemailtoaminimumanduseoursecureonlineservicesorpost.CCTVCCTVsystemsareinstalledinsomeofourTDAareasandtheseareasareusedbymembersofthepublic.Wemonitorthese,forthepurposesofpublic/staffsafetyandcrimepreventionanddetection.Inourlocations,signsaredisplayednotifyingyouthatCCTVisinoperationandshouldyouhaveanyissuespleasecontacttheTDA’sDataProtectionManager.ImagescapturedbyCCTVwillnotbekeptforlongerthannecessary.However,onoccasionstheremaybeaneedtokeepimagesforlonger,forexamplewhereacrimeisbeinginvestigated.YouhavetherighttoseeCCTVimagesofyourselfandbeprovidedwithacopyoftheimages.ShouldyouwishtodothispleasecontacttheTDA’sDataProtectionManager.WeoperateCCTVanddiscloseinaccordancewiththecodesofpracticeissuedbytheInformationCommissionerandtheHomeOffice.

Whenwillwecontactyou?Wemaycontactyou:


• InrelationtoanyserviceoractivityinordertoensuretheTDAcandeliverourservices

• Inrelationtoanycorrespondencewereceivefromyou

• Toinviteyoutoparticipateinsurveysaboutourservicesowecanmakeimprovementsifnecessary

• Formarketingpurposes–wewillonlysendyoumarketingemailsorcontactyouformarketingpurposesifyouhaveagreedforustodoso

• Weofferregularemailsandnewsletterstoletyouknowaboutourservicesandyoucanoptintoreceivethese

YourrightsYouhavetherighttorequestthatwestopprocessingyourpersonaldatainrelationtoanyTDAservice.However,thismaycausedelaysorpreventusdeliveringaservicetoyou.Wherepossiblewewillseektocomplywithyourrequestbutwemayberequiredtoholdorprocessinformationtocomplywithalegalrequirement.Youcanlegallyasktoseeanyinformationthatweholdaboutyou,andgetacopy.TodosopleasecontacttheTDA’sDataProtectionManager(contactdetailsareattheendofthePolicy).

Youhavetherighttobeforgottenandmayterminateyourarrangementwithusatanytime,inwhichcasewewillpermanentlydeleteyourrecord(s)andalldataassociatedwithit.TorequestthispleasecontacttheTDA’sDataProtectionManager.Wherepossiblewewillseektocomplywithyourrequestbutwemayberequiredtoholdorprocessinformationtocomplywithalegalrequirement.Wetrytoensurethatanyinformationweholdaboutyouiscorrect.Theremaybetimeswhereyoufindtheinformationweholdisnolongeraccurateandyouhavetherighttohavethiscorrected.Pleasecontactusifyouwishtoexerciseanyoftheserights,orifyouhaveacomplaintabouthowyourinformationhasbeenused.Wewillneedtorecordyourpersonalcontactdetailstobeabletorespondto,andtracktheprogressof,yourrequest.Whereyourequestaccesstoyourinformationwearerequiredbylawtouseallreasonablemeasurestoverifyyouridentitybeforedoingso.Thesemeasuresaredesignedtoprotectyourinformationandtoreduceriskofidentityfraud,identitytheftorunauthorisedaccesstoyourinformation.Ifyoufeelthatyourdatahasnotbeenhandledcorrectly,oryouareunhappywithourresponsetoanyrequestsyouhavemadetouseregardingtheuseofyourpersonaldata,youhavetherighttolodgeacomplaintwiththeInformationCommissioner’sOffice.You


cancontactthembycalling03031231113.Orgoonlinetowww.ico.org.uk/concerns(thisopensinanewwindow,pleasenotewecan’tberesponsibleforthecontentofexternalwebsites).ChangestotheTDA’sPrivacyPolicyThisPrivacyPolicymaybeupdatedfromtimetotime.Thedateofthemostrecentrevisionswillappearonthispage.YourongoinguseofTDA’swebsiteandservicesconfirmsyouracceptanceofthispolicy.IfmaterialchangesaremadetothePrivacyPolicy,forinstanceaffectinghowwewouldliketouseyourpersonalinformation,wewillprovideamoreprominentnotice.ContactingtheTDAaboutthisPrivacyPolicyWehopethisPrivacyPolicyhasbeenhelpfulinsettingoutthewaywehandleyourpersonaldataandyourrightstocontrolit.IfyouhaveanyquestionsorcommentsaboutthisPrivacyPolicyortomakeaSubjectAccessRequestpleasecontact:TDADataProtectionManagerTDA,TorHillHouse,TorquayTQ25QW(Email:[email protected])Wewanttomakesurethatthepersonaldataweholdaboutyouisaccurateanduptodate.Ifanyofthedetailsareincorrect,pleaseletusknowandwewillamendthem.

Documents

Privacy Policy TDA Draft v4 - investintorbay.comus via email, social media, phone, by contacting our staff, one of our partners or via CCTV or otherwise. This includes information