For The Jonny Javelin Card Company Ltd
How we obtain your personal data
You provide us with personal data personally, via email, fax, our sales agent or over the telephone. This includes name, address email address and Direct Debit mandate instructions if applicable. We use this information in order to manage and administer your account with us or our account with you, depending on whether you are a customer or supplier.
We may also keep information contained in any correspondence you may have with us by post or by email.
We only obtain information from third parties if this is permitted by law. We may also use legal public sources to obtain information about you, for example to verify your identity.
This information (including your name, address, email etc.) as relevant to us, will only be obtained from reputable third-party companies that operate in accordance with the General Data Protection Regulation (GDPR). You will already have submitted your personal data to these companies and specifically given permission to allow them to pass this information to other companies that provide similar or complimentary products and services to those we offer.
We use your personal data to manage and administer your account. We undertake at all times to protect your personal data, required of the General Data Protection Regulation (GDPR). We also take reasonable security measures to protect your personal data in storage.
Any information that you choose to give us will never be used for third party marketing purposes. We will hold your personal data only for the purposes of administering and managing your account and keeping you up to date with our product news from time to time.
· Insurance companies, loss assessors, regulatory authorities and other fraud prevention agencies for the purpose of fraud prevention and to comply with any legal regulatory issues and disclosures.
· Anyone to whom we may transfer our rights and duties under any agreement we have with you.
· Any legal or crime prevention agencies and/or to satisfy any regulatory requests if we have a duty to do so.
We need to keep your personal information for as long as we need to manage and administer your account. Information which is no longer required will be disposed of.
Data Subject rights
The General Data Protection Regulation (GDPR) grants you (hereinafter referred to as the “data subject”) the right to access particular personal data that we hold about you. This is referred to as a subject access request. We shall respond promptly, and certainly within one month from the point of receiving the request and all necessary information from you. Our formal response shall include details of the personal data we hold about you, including the following;
· Sources from which we acquired the information;
· The purposes for processing the information; and
· Persons or entities with whom we are sharing the information.
You, the data subject, shall have the right to obtain from us, without undue delay, the rectification of inaccurate personal data we hold concerning you. Taking into account the purpose of the processing, you the data subject, shall have the right to have incomplete personal data completed.
You, the data subject, shall have the right to obtain from us the erasure of personal data concerning you without undue delay.
You, the data subject, shall have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine‐readable format and have the right to transmit this data to another controller, without hindrance from us.
You, the data subject, shall have the right to object, on grounds relating to your situation, at any time to the processing of personal data concerning you. Unless this relates to processing that is necessary for the performance of a task carried out in the public interest or an exercise of official authority vested in us. We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedom of you, the data subject, or for the establishment, exercise or defence of legal claims.
We do not carry out any automated processing, which may lead to an automated decision based on your personal data.
If you would like to invoke any of the above data subject rights with us, please write to The Jonny Javelin Card Company Ltd, 90 Ripon Road, Killinghall, Harrogate HG3 2DH or email firstname.lastname@example.org
In order to provide the highest level of customer service possible, we need to keep accurate personal data about you. We take reasonable steps to ensure the accuracy of any personal data we obtain. We ensure that the source of any personal data or information is clear and we carefully consider any challenges to the accuracy of the information. We also consider when it is necessary to update the information, such as name or address changes and you can help us by informing us of these changes when they occur.
If you have a complaint regarding the use of your personal data then please contact us by writing to The Jonny Javelin Card Company Ltd, 90 Ripon Road, Killinghall, Harrogate HG3 2DH or email email@example.com