You’ve probably heard about the General Data Protection Regulation (GDPR). The aim of this law is to enhance the protection of citizens’ personal data by requiring organizations that deal with that data to be transparent and handle them in a secure way.
Who controls my personal data?
The Data Controller is Smit Training Ltd. It is registered in the UK, company number 11001849.
Registered address: 537 A.I.Accountax Hub, 5th Floor, The Grange, 100 High Street, London N14 6BN.
The Data Controller’s representative is the Data Protection Officer.
You can contact the Data Protection Officer at firstname.lastname@example.org and on +44 (0)207 637 3946.
Smit Training Limited is registered as a Data Controller with the Information Commissioner’s Office (ICO) Certificate number ZA740038.
What type of information is collected from you?
The categories of personal data collected are your name, your job title, your company name, your company address, your business email, telephone, your racial or ethnic origin (e.g. nationality or cultural affiliations).
How is your information used?
Your information may be used to:
Carry out our obligations arising from any contracts entered into by you and us.
Send you communications which you have requested and that may be of interest.
Notify you of news, insights and upcoming events that you have opted to receive from us.
What is the purpose and legal basis of the processing?
At Smit Training we will rely on your ‘consent’ to process personal data. This is defined by the General Data Protection Regulation (GDPR) standard of ‘consent’ as a legal basis for processing personal data.
GDPR defines consent as ‘any freely given, specific, informed and unambiguous indication of the data subjects’ wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her’.
By submitting your information you have accepted that you understand and accept this as valid legal basis for processing your personal data.
Who has access to your information?
Your submitted information is only available to employees and contracted service providers managing this information for purposes of contacting you based on your preferences or carrying out obligations arising from any contracts entered into by you and us.
How long will data be retained?
Regarding the points outlined above, data will be retained:
1. In the case of data being provided for the sending of commercial information, it may be retained indefinitely for this purpose, unless the user does not give his or her consent to it being used for this purpose or revokes their consent.
2. In the case of requests for information or complaints, data will be retained for as long as is required in order to respond to the request or process the complaint. After this, it will be saved for record-keeping purposes, except where a user requests the deletion of this data via the email address provided above.
3. In the case that data is provided for the provision of services such as workshops, it will be retained for as long as is required to deliver the service, and, deleted thereafter unless a longer retention period is necessary to fulfil legal requirements.
Smit Training will be required to deactivate personal data after the relevant retention period, or following receipt of a data subject’s request to do so; whichever comes first. The data subject reserves the right to change their preferences or withdraw consent at any point during the retention period.
Smit Training confirms the following rights to each Data Subject:
The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling
This policy was last updated on 27th March 2020.