General Data Protection Regulation Privacy Notice
1 At Blue Tuesday Limited (we) take responsibility for complying with the GDPR, at the highest management level and throughout our organisation. Under the terms of GDPR we are data controllers. We may hold personal records of Partners, Directors or employees of firms with whom we do business; these personal details will be limited to surname, forename, email, position within the firm, details of employer, work phone number/s and mobile phone number/s. These details will be processed for legitimate interests in that we need to contact our clients in the course of our business for reasons of, for example, providing technical support for our software system or updating the computer software which we have supplied to them under contract. If we do not hold the data mentioned, we will not be able to provide these services. We will not record, note or hold sensitive further personal data for these persons. The personal details will come from within the firm we are doing business with, or the person themselves, or from data publicly available on the website of the firm or of The Law Society.
2 Personal data shall be processed fairly and lawfully and only if we have a legitimate basis for holding it, shall only be obtained for one or more specified legal or regulatory purpose and not processed further in any manner incompatible with said purpose/s, shall be adequate, relevant and not excessive, shall be accurate and, where possible, kept up to date, shall be processed in accordance with the rights of data subjects under the current data legislation, and shall not be kept for longer than is necessary for said purpose/s. Appropriate measures will be taken against unlawful or unauthorised processing of personal data and against accidental loss, damage or destruction.
3 Personal data will be held as computer data. This data will not be shared with any third parties but may be visible to and used by Directors, employees and consultants of Blue Tuesday Limited.
4 We will either verbally or in writing give people for whom we hold personal data the following information:
· Our identity (Blue Tuesday Limited of 20-22 Wenlock Road London N1 7GU)
· The purpose/s for which we intend to process the data (in order that we may contact the relevant people for the purposes of providing technical support services, programme updates or discussions, emails or documents relating directly to the services we provide as supplier of Blue Tuesday software)
· Details of the data held (surname, forename, email, position within the firm, details of employer, work telephone number and mobile telephone number)
· The opportunity to request change or deletion of some or all of the data (contact us by email at any time to make such a request—support@bluetuesday.co.uk)
5 From time to time we may contact persons for whom we hold personal data to request their verification that the data is still accurate. Should this result in corrective information being received, the records will be amended, but we may retain a record of the previous information and record the date and circumstances of the amendment. If any individual is not satisfied that we have taken the appropriate action to keep their personal data accurate, they may apply to a Court for an order to rectify, block, erase or even destroy the inaccurate information.
6 Personal data held regarding personnel of firms to whom we supply Blue Tuesday software will be deleted on request, subject to the policies outlined in paragraph 7, but accounting records will be retained securely in accordance with regulatory requirements and support/update records may be retained for the purposes of improving our support and/or software services.
7 Persons for whom we hold personal data have a right of access to a copy of the information comprised in their personal data but we may require the request to be put in writing and may request a reasonable fee for providing the information where requests for the same may be considered excessive. The information will be supplied as soon as possible and in any event a response will be sent within twenty five working days. Personal data will not be disclosed to third parties. Persons for whom we hold personal data may object to processing that is likely to cause damage or distress and may, in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed. They may also have the right to claim compensation for damages caused by a breach of Data Protection regulations.