Note on GDPR to clients and suppliers of GSB Comms

We take our data protection obligations seriously and want to give you the following fair processing information about how we process your personal data.

The Data Controller is GSB Comms (the founders and associates www.gsbcomms.co.uk).  We do not have a Data Protection Officer but please contact Charlie Simpson if you have any enquiries.

The purposes of the processing.  We process your personal data in order to carry out our services in providing communications expertise and any other activities which a client or supplier might reasonably expect us legitimately to carry out.

The lawful basis for the processing.  We rely on our legitimate interest under Article 6 (2) as the lawful gateway to process this personal data.

The categories of personal data obtained.  We may process the following personal data about you:

Your name, address, email address, telephone number, VAT number and bank details (if applicable)

The recipients or categories of recipients of the personal data. Your personal data will only be seen by authorised individuals within GSB Comms, our legal and professional advisers, and third parties to whom we have a legal and/or statutory obligation to supply this information.

The retention periods for the personal data.  We will retain your personal data for so long as we are required to do so either by statute or regulation. This period is often, but not always, 7 years.  Thereafter, being mindful of our obligations to minimise data where possible, we will retain your personal data only for so long as we reasonably consider justifiable.

The rights available to individuals in respect of the processing.  As a data subject you have the following rights:

  • The right to be informed – articles 12, 13, 14
  • The right of access – article 15
  • The right to rectification – article 16
  • The right to erasure – article 17
  • The right to data portability – article 20
  • The right to object to processing for direct marketing or personal profiling or automated decision making- article 21
  • The right to restriction of processing during disputes – article 18.

The details of whether individuals are under a statutory or contractual obligation to provide the personal data.  We are under: a statutory obligations to provide a copy of our accounts to HMRC at financial year end.

Changes to our privacy policy

You will be notified by email of any changes we make to our privacy policy in the future.

Contact

Any questions, comments, complaints and requests regarding this privacy policy should be addressed to Charlie Simpson.

 

May 2018