Source: https://www.waterstons.com/miscellaneous/privacy-notice
Timestamp: 2019-02-17 08:32:34
Document Index: 236441415

Matched Legal Cases: ['Art 6', 'Art. 6', 'Art. 6', 'Art 6', 'Art 6', 'Art 6', 'Art. 6', 'Art 6', 'Art 6', 'Art. 6']

Privacy Notice | Waterstons
This privacy notice explains what you can expect when Waterstons collects and processes your personal information.
Here at Waterstons we take our responsibilities to protect your privacy very seriously and recognise our responsibility to handle, manage and secure your data appropriately and legally. We operate in compliance with the European General Data Protection Regulation (GDPR) and Data Protection Act 2018 (UK).
Waterstons are the Data Controller for the personal data we collect about our clients and their employees, potential new employees, seminar attendees and mailing list subscribers, and we are the processor for our project, managed services, service desk or hosting client’s data. This privacy notice explains what you can expect when Waterstons collects and processes your personal information.
We keep to a minimum the information we hold about you about you.
Your data may be held or processed outside the EEA.
Waterstons is registered with the Information Commissioner's Office (Z6192161).
If you have any questions or concerns about this Privacy Statement or how we handle your personal data, please contact us:
At Waterstons we take security seriously and are ISO 27001:2013 and Cyber Essentials Plus certified and committed to information security best practice. Waterstons will store, process and transmit (when necessary) your information securely, we will do this using encryption and recognised appropriate security controls. We will ensure our staff respect your data and your privacy and when no longer required we will dispose of your data in a secure manner using recognised deletion and sanitisation techniques, cross cut shredding or appropriately vetted disposal contractors.
Our preference is to use Transport Layer Security (TLS) to secure email communications using encryption; however we recognise some of you may not. We therefore run opportunistic TLS meaning if you also use it our communications will be encrypted and secure by default. But if you don’t communications will continue but they will not be encrypted and may not be entirely secure when passing over the internet. If you want to protect all emails and attached documents you send to us, we encourage you to set up opportunistic TLS also.
Phone calls are not encrypted or recorded however when we call you we collect Calling Line Identification (CLI) information. We use this information to help improve efficiency and effectiveness as well as for service desk reporting and troubleshooting performance issues. This information is retained for a maximum of 90 days.
Data about clients: duration of your relationship with us, then 7 years.
Financial data: is kept for a minimum 7 years or if it relates to a client then the above retention will apply.
However we do have a small number of companies providing services to us and they process your data on our behalf:
Telehouse & Pulsant Group (Datacentre Providers)
Microsoft (Office 365 in Europe)
Iron Mountain (Offsite Backup Storage)
PHPDataShred (Secure Paper Disposal)
Primate (Public Website Hosting)
RMT (Auditors)
Muckles LLP (Legal Partners)
Restore PLC (Offsite Document Storage)
If you choose to sign up to an event via our events page we will also gather your name, job title, company name, email address and the way in which you heard about our event, so we can understand who is attending our event and how you came to hear about it. Should you choose to opt in to receive marketing on future events, we will add you to our mailing list to do so, you can of course opt out at any time by letting us know.
Art 6(f) Legitimate interests of Waterstons to generate business by maintaining contacts, generating proposals and communicating with prospective clients regarding their requirements. If you have previously requested information we may send you information about related products and services we offer (Marketing); however you can object to this at any time and we will add you to our suppression list and cease sending you such Marketing Communications.
Waterstons uses a third party service to help maintain the security and performance of the Waterstons website, as well as to determine website visitor behaviour and help us plan our business strategy, this helps us tailor our services and ensure they are relevant to our prospective client’s needs. To deliver this service it processes the IP addresses of visitors to the Waterstons website.
Use of cookies by the Waterstons website
When someone visits www.waterstons.com we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
Art. 6(f): Legitimate interests where it is in the business interests of Waterstons to secure our IT infrastructure, improve the services we offer and gather data to aid business strategy planning.
As our client we will hold the following information about you:
Information about your business activities and in some cases your clients/customers
We use the information we hold about you and your business to provide the best service we can, to communicate with you regarding projects, products or services we are providing or to inform you of other related products or services you may be interested in.
We also use your information to bill you, and keep track of payments.
Art. 6(a) Consent if you have asked us to provide you with information on upcoming events and related news via our mailing list.
Art 6(f) Legitimate interests of Waterstons to generate business by maintaining contacts, generating proposals and communicating with clients regarding their requirements and making you aware of other related products and services you may be interested in (Marketing); however you can object to this at any time and we will add you to our suppression list and cease sending you such Marketing Communications, you may still receive service communications. If the need arises we may also rely on legitimate interests for the recovery of unpaid debts.
Art 6(f) Legitimate interests of Waterstons to generate business by maintaining contacts, generating proposals and communicating with prospective clients regarding their requirements. If you have previously requested information we may send you information about related products and services we offer, however you can opt out at any time.
Art 6(f) Legitimate interests of Waterstons to generate business by maintaining contacts, generating proposals and communicating with prospective clients regarding their requirements. If you have previously requested information we may send you information about related products and services we offer, however you can object to this at any time and we will add you to our suppression list and cease sending you such Marketing Communications.
We may use the logs from our servers to help maintain security, as well as to determine website visitor behaviour and help us plan our business strategy, this helps us tailor our services and ensure they are relevant to our prospective client’s needs.
Art. 6(f): Legitimate interests where it is in the business interests of Waterstons to gather data to aid business strategy planning.
We will use your resume or any information you or a recruitment agency provide to us to consider you for employment. If you are unsuccessful we will retain this information for 12 months after the recruitment exercise has ended and then they will be securely destroyed. If you are employed these will become part of your personnel file.
Art 6(f) Legitimate interests of Waterstons to securely and fairly manage recruitment to ensure we employ the right people for our company and we will use your details to make the appropriate checks.
Art 6(f): Legitimate interests where it is in Waterston’s interests to ensure prospective employees are appropriately vetted.
We may use the logs from our servers to assist in our firm's security, as well as to determine website visitor behaviour and help us plan our business strategy, this helps us tailor our services and ensure they are relevant to our prospective client’s needs.
Art. 6(f): Legitimate interests where it is in the business interests of Waterstons to gather data to aid business strategy planning and ensure our systems are protected.