This policy explains when and why we collect personal information, how we use it, the conditions under with we may disclose it to others and how we keep it secure.
IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER
Guest Motors Limited (trading as Guest Truck and Van, Vehicle Lining Services and Partscomm) and Sherwood Truck and Van Ltd (trading as Sherwood Truck and Van and Sentinel), is the Data Controller and is committed to protecting the rights of individuals in line with the Data Protection Act 2018 (DPA) and supplemented by the General Data Protection Regulation (GDPR).
Guest Motors Limited, Kenrick Way, West Bromwich. B70 6BY.
Sherwood Truck and Van Ltd, Kenrick Way, West Bromwich. B70 6BY.
Tel: 0121 553 2737
CONTACT DETAILS OF THE DATA PROTECTION OFFICER
Guest Motors Limited and Sherwood Truck and Van Ltd has a Data Protection Officer who can be contacted through firstname.lastname@example.org
WHAT INFORMATION DO WE COLLECT?
GDPR defines personal data as the following:
‘Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;’
SPECIAL CATEGORIES of personal data (sensitive personal data) relate to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation.
THE PERSONAL INFORMATION WE COLLECT MIGHT INCLUDE THE FOLLOWING DEPENDING ON YOUR RELATIONSHIP WITH THE COMPANY
- Phone number
- Date of birth
- Contact details
- Marital status
- National Insurance number
- Driving Licence number
- Driving Licence endorsements
- ‘Unspent’ convictions
- Eligibility to work in the UK documents
- Brief medical history
- contact details – name, relationship, address, contact number.
- Bank details
- Employment history
- Attendance records, sick leave, annual leave
- Return to work form details
- Expression of wishes
- Accident reports
- Contract of employment
- Payroll number
- Pension details
- Payment details
- Registration number
- Personal images and movements – CCTV
HOW WILL YOUR INFORMATION BE USED? WE MAY ALSO USE YOUR INFORMATION FOR
WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
For processing to be lawful under GDPR, it is important that Guest Motors Limited and Sherwood Truck and Van Ltd, identify all lawful basis before processing any personal data. As a business that processes personal data we must satisfy a condition under Article 6 and Article 9 if the data being processed is classified under the special category.
THE LAWFUL BASIS WE USE ARE
|ARTICLE 6 – PERSONAL DATA||ARTICLE 9 – SPECIAL CATEGORIES|
|The data subject has given consent to the processing *||The data subject has given explicit consent to the processing|
|Processing is necessary for the performance of a contract with the data subject||Processing is necessary for the purposes of carrying out the obligations of the controller or of the data subject in the field of employment|
|Processing is necessary for compliance with a legal obligation||Processing is carried out in the course of its legitimate activities by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim.|
|Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.||Processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity|
|Processing is necessary for the performance of a task carried out in the public interest.||Processing is necessary for reasons of substantial public interest|
|Processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes|
WHO RECEIVES YOUR INFORMATION?
THE PERSONAL INFORMATION WE HOLD MAY BE SHARED WITH ONE OR MORE OF THE FOLLOWING DEPARTMENTS/ORGANISATION’S
We will not sell or rent your information to third parties.
We will not share your information with third parties for marketing purposes, unless prior consent is received. Except for vehicle manufacturers with whom we have a franchise agreement (IVECO Limited/ FIAT CHRYSLER AUTOMOBILES UK LTD/London EV Company Ltd).
We will communicate your Data to IVECO Limited/ FIAT CHRYSLER AUTOMOBILES UK LTD/London EV Company Ltd and their related subsidiaries and affiliates of the CNH Industrial Group/FCA Group in order to allow them to fulfil the obligations regarding warranty and product safety; carry out assistance services also through the authorised workshops network; answer and satisfy every customer request; send any communications of a technical and / or organisational nature; conduct surveys aimed at improving the quality of the services provided, by virtue of the legitimate interest of the manufacturer.
Subject to your express consent, we will communicate your Data to IVECO Limited/ FIAT CHRYSLER AUTOMOBILES UK LTD/ London EV Company Ltd and their related subsidiaries and affiliates of the CNH Industrial Group/FCA Group with the purpose of sending commercial communications as well as advertising on their products and services, or perform market researches (‘Marketing Third Party’).
In the course of our activities Data may be shared and communicated to IVECO Limited/ FIAT CHRYSLER AUTOMOBILES UK LTD/ London EV Company Ltd and the subsidiaries and affiliates of the CNH Industrial Group/FCA Group, authorised workshops, service providers, based into and outside the European Union, which are under specific contractual obligation and may use it solely for the fulfilment of the purposes listed above.
For more detailed information on the sharing of personal information please contact the Data Protection Officer on email@example.com
ANY TRANSFERS TO THIRD COUNTRIES AND THE SAFEGUARDS IN PLACE
Within its contractual relations the Company may transfer the Data in countries outside of the European Economic Area (EEA), including store them in databases managed by entities acting on behalf of the Company. Databases management and Data processing are bound to the purposes of the processing and are carried out according to applicable data protection law. In case the Data are transferred outside of the EEA the Company will use any appropriate contractual measures to guarantee an adequate protection of the Data including – among the others – agreements based on the standard contractual clauses adopted by the EU Commission to rule the transfer of personal data outside of the EEA.
HOW LONG WILL YOUR INFORMATION BE HELD?
Please refer to Guest Motors Limited and Sherwood Truck and Van Ltd, Retention and Erasure Policy which can be requested from the Data Protection Officer by email at firstname.lastname@example.org
WHAT ARE YOUR RIGHTS/SUBJECT ACCESS REQUESTS
You have a right to access your personal information, to object to the processing of your personal information, to rectify, to erase, to restrict and to port your personal information, depending on the purpose of processing.
|THE RIGHT OF ACCESS||
|THE RIGHT OF RECTIFICATION||
|THE RIGHT TO ERASURE||The right to erasure does not provide an absolute ‘right to be forgotten’. Individuals have a right to have personal data erased and to prevent processing in specific circumstances:
The Company can refuse to comply with a request for erasure where the personal data is processed for the following reasons:
|THE RIGHT TO RESTRICT PROCESSING||The Company will be required to restrict the processing of personal data in the following circumstances:
|THE RIGHT TO DATA PORTABILITY||This right allows individuals to obtain and reuse their personal data for their own purposes across different services.The right to data portability only applies:
|THE RIGHT TO OBJECT||Individuals have the right to object to;
|RIGHTS IN RELATION TO AUTOMATED DECISION MAKING AND PROFILING||
Under the General Data Protection Regulation guidelines anyone connected to the Company may request details of their personal information which we hold. This can be requested free of charge by emailing Guest Motors Limited and Sherwood Truck and Van Limited, Data Protection Officer by email; email@example.com
However, a ‘reasonable fee’ may be applied if the information requested is manifestly unfounded or excessive, particularly if application is repetitive.
Requests for access to personal data held will be acknowledged within one month of the request or two months if it is deemed to be excessive. All Subject Access Requests will require proof of identity before any applications are granted.
Any other requests should be made in writing to the Data Protection Officer:
Data Protection Officer
Guest Truck and Van
If your personal data is requested for an alternative use, from that already stated, further consent will be sought with use of a Consent to Release Information Form.
HOW DO WE KEEP YOUR INFORMATION SECURE?
Guest Motors Limited and Sherwood Truck and Van Ltd, keeps personal information in one or more of the following places:
Secure Database, Secure Access Folder, Password protected dealer management system and locked filing cabinets.
USE OF ‘COOKIES’
HANDLING OF COMPLAINTS
Complaints will be dealt with by the Data Protection Officer and will be responded to within 30 days. If you are not satisfied with the response you should refer your complaint to the ICO https://ico.org.uk/concerns
CONSENT (SALES AND MARKETING ONLY)
☐ I have read the Privacy Notice and give my consent for the purposes and processes as detailed below:
☐ I agree ☐ I do not agree
MARKETING THIRD PARTIES
☐ I agree ☐ I do not agree
FIRST NAME: _______________________________________________________________________
REVIEW OF THIS POLICY
We keep this policy under regular review. This policy was last updated October 2020.