1 What Personal Data We Hold And Process
We hold different types of data for different purposes.
For our clients and their representatives, and those involved in delivering projects:
- Telephone number
For those that work for us on a contract basis:
- Telephone number
- Qualifications relevant to the work they undertake
- Payment details
For our employees:
- The information we hold and process for employees is provided within the agb Environmental Employee Handbook.
We will maintain personal data for a minimum of 12 years, or longer if we are required to do so, as this is the typical period that we may be held liable for the services we provide. We therefore need to maintain a record of who we have worked for and with on any project for at least this time.
2 How We Use Personal Data
We store personal data in the following ways:
- On our internal electronic storage equipment.
- On external storage services (“cloud” based systems)
- On paper
All electronic personal data is secured through secure passwords. Any external data storage providers have an effective security policy in place ensuring that data is kept securely.
We process personal data in the following ways:
- For the delivery of our services
- For the management of our company
- For marketing activities of our business
3 Lawful Basis
We have a Legitimate Interest in holding and processing the personal data, as the data is required for the ongoing delivery of our services to our clients. This may include informing our clients of changes in how we are to provide our services (such as policy changes), or to highlight points in our services of importance to the work of our clients.
However, for the purposes of direct marketing only, we acknowledge that consent will be required from the individual. We will ensure that individuals positively opt-in to receive direct marketing from us.
We collect anonymous data on our website using cookies.
We do this to track how users are using our website, for example using Google Analytics.
5 Accessing Your Data
You have the right to access, and other certain rights are afforded to you under GDPR. To do this, please email firstname.lastname@example.org.