The purpose of this Privacy Statement (“Policy”) is to inform you about how we as a business collect, use, share and store your personal data. This Policy applies to all customers, suppliers and/or potential customers. The official controller of your personal data in this matter is One Source ICT and will use your personal data only for the purposes as stated in this Statement.
· Types of personal information do we collect and/or process
We collect and process your personal data including, but not limited to, the following types of personal data:
· Contact details such as name, phone number, email address, postal address, social media profile;
· Photographs (Taken on or near our premises)
· CCTV Footage (Taken on or near our premises)
· Demographic information
· Audio and/ or visual recordings (Taken on or near our premises)
· Financial details (For example when booking a consultation).
The provision of certain personal data is mandatory (and may be required accordance with a contractual requirement or to enter into a contract such as where you are an individual supplying services to us). The collection of any such data will be made clear at the time of collection of the information. If you choose not to submit this information, this may result in us not being able to provide our services to you or not being able to trade with you.
· How do we use this information?
We use your personal data as necessary to provide our services and to fulfil our contract with you. We also process personal data in order to fulfil our contracts with business various vendors, suppliers and joint venture partners.
We may also use your personal data as necessary to manage our business for our legitimate interests. It is also in our legitimate interests to use your personal data for safety and security purposes as is necessary to ensure the security of our staff and customers.
In particular, we also process your personal data for the following purposes:
· Online promotional and marketing activities
If you do not object to us using your personal data, we will use your personal data (such as photographs or video clips) for the purposes of promoting and marketing our business online and in other media. It is in our legitimate interests to promote our business and to market events which we host and/or attend. If you do not object to us using your personal data, we may also use your data to contact you to inform you of events, developments and promotions of ours and you can unsubscribe from these communications any time.
· CCTV and related video surveillance systems
We monitor both the internal and external areas of our business premises using CCTV and related video surveillance systems. Images recorded by surveillance systems are considered personal data. We use this information for our legitimate business purposes to protect the safety and security of our customers and personnel, to protect our property, to deter crime and to investigate any security incidents or accidents.
· Sharing of Personal Data
At times is may be necessary to share your personal data for the legitimate purposes already set out in this Policy. Your personal data will may be shared with affiliates and third parties including but not limited to:
· Online websites (including social media companies) and our IT providers
· Media and promotional companies
· Payment processors
· Security companies
· Insurers and legal advisors
We may also share your personal data where we are required to do so by law. Where our business is bought or sold your information may also be disclosed, where permitted by applicable law, in connection with a corporate restructuring, sale, or assignment of assets, merger, or other changes of control.
· Retention and Security
We will maintain appropriate technical and organisation measures to protect against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to your information. We will provide a level of security that is proportionate to the risks that are presented by the processing activity, having regard to the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing.
We will retain your personal data for as long as is necessary for the purposes set out in this Notice or as needed for us to provide our services or to perform our contract with you. We will retain and use your personal data to the extent necessary to comply with our legal obligations, to resolve disputes and to enforce our agreements.
[Generally, we will only retain CCTV footage for 30 days however we may retain CCTV footage for longer periods for reasons including, but not limited to, when there has been a theft or break-in, the footage is subject to an investigation, or it is necessary for the defence or pursuit of a legal claim].
· Your Rights as The Subject
You have certain rights as a data subject in relation to your information. While some of these rights are general and unrestricted, other rights only apply in certain circumstances.
Your rights include:
· Access – you are entitled to obtain a copy of the personal data which we hold about you.
· Rectification – you can request rectification of your personal data if it is inaccurate or incomplete.
· Restriction – you can restrict our use of your personal data.
· Deletion – you are entitled to request that we erase your personal data.
· Objection – you can object to the processing of your personal data where our legal basis for processing your data is our legitimate interests.
These rights may be restricted in certain circumstances for instance where they may be needed to comply with our legal obligations or for the defence or exercise of legal claims.
You can exercise these rights by contacting us at email@example.com
In circumstances where you are not satisfied with our use of your personal data or you are not satisfied with how we have responded to your request to exercise your rights, you have the right to lodge a complaint with the Office of the Data Protection Commission who can be contacted at firstname.lastname@example.org or LoCall 1890 25 22 31.
· Policy updates
This Policy may be updated from time to time. If we make changes that are material we will notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification.