Data controller: Dunton Consultancy LLP
Date Protection Officer: Paul Pearson, SHEQ Director, [email protected]
Dunton Environmental collects and processes personal data relating to its clients and suppliers to manage the business relationship. Dunton Environmental is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.
What information does the organisation collect?
Dunton Environmental may collect your name, company email address, company address, telephone number.
Dunton Environmental also collect CCTV on visitors to site or head office and recordings of calls made to head office over the telephone.
Data will be stored in project files, with finance and with Sales and Marketing and in other IT systems (including the organisation’s email system).
Why does the organisation process personal data?
Under the terms of data protection legislation, there are six grounds which justify data processing, namely
- consent of the data subject
- performance of a contract
- compliance with a legal obligation imposed on us
- vital interests of the data subject
- legitimate interests of the data controller or another person
- public interest
At least one of these grounds will always apply to any personal data we process.
The normal justification for us processing your data will be to enable us to perform our contract with you for the following purposes:
- To arrange deliveries and collections of goods and services
- To take and process orders
- To take, or to make payments for services
- To contact you with any issues
- To keep you informed of any updates and news that may be relevant and useful to you
We may hold data in relation to other parties connected with our clients’ matters. This will usually be justified by the legitimate interests of our clients and will be restricted to data which is relevant to the work we are doing.
Data on suppliers may be held to enable us to fulfil our contracts with our suppliers and also, with the consent of suppliers, in order to instruct them on behalf of our clients when appropriate.
Transfer of Data Abroad
Dunton Environmental will not transfer your data to countries outside the European Economic Area.
How does the organisation protect data?
Dunton Environmental has an internal I.T. Security Policy which sets out how electronic data will be maintained and stored.
For how long does the organisation keep data?
Data for marketing use will be kept for the duration of the relationship. CCTV and telephone recordings will be kept no more than 30 days. Project files will be kept for no longer than seven years to ensure contractual compliance and reference and in instances of warranties for project liability 10 years.
Your rights and your personal data
As a data subject, you have several rights. You can:
- access and obtain a copy of your data on request;
- require the organisation to change incorrect or incomplete data;
- require the organisation to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; and
- object to the processing of your data where the organisation is relying on its legitimate interests as the legal ground for processing.
If you would like to exercise any of these rights, please contact Paul Pearson, SHEQ Director, [email protected].
If you believe that Dunton Environmental has not complied with your data protection rights, please in the first instance contact our Data Processor. If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Dunton Environmental do not make automated decision making in our business.
We will never (and will not allow any third party to) use the statistical analytics tool to track or to collect any Personally Identifiable Information (PII) of visitors to our site. Google will not associate your IP address with any other data held by Google. Neither we nor Google will link, or seek to link, an IP address with the identity of a computer user. We will not associate any data gathered from this site with any Personally Identifiable Information from any source, unless you explicitly submit that information via a fill-in form on our website.