Who we are?
What is this policy?
Once you provide consent by using our website, you may change your mind and withdraw consent at any time by contacting us at email@example.com but that will not affect the lawfulness of any processing carried out before you withdraw your consent.
What personal data do we collect about you and how do we collect it?
We collect information from you such as your name and email address when you email us to register interest, submit questions, provide feedback to us or otherwise communicate with us.
We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
How do we use your personal data?
GCMS collects and uses your personal information to operate the GCMS website and consider and respond to any questions or views you have shared. We may make your personal data available to certain people involved with the operation of GCMS and our website (for example those in administrative, marketing, legal, or system administration).
What lawful bases do we rely on to use your personal data?
We will process your personal information only for permitted purposes, including on the following bases:
We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your personal data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground applies
International data transfers
We, or a third party with whom we share personal information, may transfer, host, store and/or handle personal data outside of the UK or EEA – for example where we and/or our service providers (including servers) are based outside of the UK or EEA. We will only permit any transfers of personal information outside the UK and EEA to happen if adequate safeguards have been put in place to protect the personal data.
How long is data retained?
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. Where personal data is collected for the purposes related to our legitimate interests, it shall be retained as long as needed to fulfil such purposes. We may retain your personal data for a longer period where you have given consent to such processing, in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
Your information is securely stored. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.
Under data protection law, you have rights including:
- Your right of access – you have the right to ask us for copies of your personal information.
- Your right to rectification – you have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure – you have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – you have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing – you have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability – you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
1We have proposed some drafting here in relation to GCMS’ data security procedures. It may need to be adapted to be consistent with the actual procedures
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you and we try to respond to all legitimate requests within that period. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Please contact us by emailing firstname.lastname@example.org or writing to us at 1 Chamberlain Square Cs, Birmingham, United Kingdom, B3 3AX if you wish to make a request.
How to complain
If you have any concerns about the use of your personal data, you can make a complaint to us by emailing email@example.com
You can also make a complaint to the ICO if you are unhappy with how we have used your data. The ICO’s address is:
Information Commissioner’s Office
Wycliffe House Water Lane
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk