DigiData's Privacy Policy
DigiData Consulting Ltd is committed to respecting and protecting your privacy. We comply with the European Union's General Data Protection Regulation (EU 2016/679) and the local laws applicable in the countries where we and our consultants operate. In this notice, we will tell you in detail how we use and share your personal information and explain your rights regarding how we use your personal information.
Who is DigiData Consulting Ltd?
DigiData Consulting Ltd is a law firm with headquarters in Scotland and with consultants all over the world. DigiData controls the processing of any personal data that you provide to us. You can also contact our Data Protection Officer (dpo@digidataconsulting.com) if you have an enquiry or question.
What Personal Data do we collect?
The GDPR defines "personal data" as any information that relates to and identifies you. This can be either directly from this information or indirectly by reference to other information we can access. The personal data we collect and how we collect it depends on how you interact with us. Categories of personal data that we collect include:
· Contact information such as name, email address, and telephone number
· Biographical information such as job title, employer, photograph, and video or audio content, including you
· Marketing, communication preferences, and related information
· Billing and financial information (billing address, bank account, and payment information)
· Services information (details of services that we have purchased from you)
Sometimes, we collect personal data directly from you:
· When a client contacts DigiData for information about our consultancy services, we need to ask for the information we need to provide those services. This information includes but is not limited to, contact details, billing information, and information necessary to conduct checks and data relevant to the services provided by DigiData Consulting Ltd.
· Information provided by a client (or prospective client) will often include personal data related to a person(s) whose information is relevant for our services; for example, we might advise a company on how to handle training data containing personal information.
Occasionally, DigiData Consulting Ltd will have employment opportunities. Candidates applying for a job with our firm will need to supply personal data and other information relevant to their application. Our computers and our network storage are encrypted and secure. If you visit our office, we may collect information to identify you and complete the necessary security checks. CCTV may collect your image. Provide information to us about another person. You must ensure that you comply with any legal obligations that may apply to providing the information to us and allow us, where necessary, to share that information with other relevant parties.
Information we collect from third parties
Most of the personal data we collect about you will be information you provide to us voluntarily. In some circumstances, we may also receive information from regulatory bodies like Ofcom, EDPB, or the Digital Services Coordinator in your country. Some of these third-party sources may include publicly available sources of information. We will also receive information about you from Google Analytics, a web analytics service provided by Google, Inc. ("Google"), whose servers are in the United States of America. Google Analytics uses cookies to help us analyse how users use our site (www.digidataconsulting.co.uk).
Data we collect automatically
When you visit our website (digidata.uk), the website will automatically collect, store, and use technical information about your equipment and interactions.
How we use your data
We will only use your data fairly and where we have a lawful reason. We can use your data with your consent, or another legally permitted reason applies. These include fulfilling a contract with you when we have a legal duty to comply with or when it is in our legitimate business interest to use your data. We can only rely on our legitimate business interest if it is fair and reasonable to do so. Our use of your data depends on how and where you interact with us. We will only process special category data where the processing is necessary to provide our clients with advice regarding obligations.
Sharing and transferring your data
We treat your data with respect and do not share it with third parties except as described above.
We may disclose personal data relating to our clients, their employees, and agents to other legal specialists, including consultants or experts engaged in a matter. We may also disclose personal data to third parties to obtain legal advice. We may share personal data with our suppliers and service providers, including event organisers and partners, as well as document production and management services. We may share personal information when necessary with regulatory authorities. We may also share your data when you consented to us.
We will only transfer your data outside of the European region under the following circumstances:
· Where the transfer is to a country or other territory which has been assessed by the European Commission (or an equivalent UK body) as ensuring an adequate level of protection for personal data
· With your consent, or
· On the basis that the transfer is compliant with the GDPR and other applicable laws. Please contact our data protection officer if you have any questions about how we share or transfer your data.
How we protect your data
We protect your data and implement appropriate technical and organisational security measures against unauthorised or unlawful processing and accidental loss, destruction, or damage. Don't hesitate to contact the data protection officer (dpo@digidataconsulting.com) if you have any questions about how we protect your data.
Keeping your data
We do not keep your personal data for any longer than is necessary to fulfill the purpose for which we collected it. We will not keep your personal data longer than necessary to comply with any legal, regulatory, or reporting obligations or to assert or defend against legal claims.
Your rights regarding your personal data
You have certain rights regarding how we use and keep your personal data. These are:
· You can require us, to update or correct any inaccurate personal data, or to complete any incomplete personal data, concerning you. If you do, we will take reasonable steps to check the accuracy of, and correct the information. Please let us know if any of your information changes so that we can keep it accurate and up to date;
· You can require us to stop processing your information for direct marketing purposes; if you withdraw your consent, we may not be able to provide certain products or services to you; and
· You have the right to object to our use of your personal data more generally. You may also have the right, in certain circumstances to:
· Be provided with a copy of any personal data that we hold about you, with certain related information. There are exceptions to this right; for example, where information is legally privileged or if providing you with the information would reveal personal data about another person. To require us, without undue delay, to delete your personal data To "restrict" our use of your information, so that it can only continue subject to restrictions; and To require personal data which you have provided to us and which are processed by using automated means, based on your consent or the performance of a contract with you, to be provided to you in a machine-readable format so that they can be "ported" to a replacement service provider.
You can exercise the above rights, where applicable by contacting our data protection officer. We will require you to provide satisfactory proof of your identity in order to ensure that your rights are respected and protected. This is to ensure that your personal data is disclosed only to you.