Blue Whale will seek to protect the confidentiality and security of your Personal Data in accordance with the EU General Data Protection Regulation (“GDPR”).
INFORMATION COLLECTION AND USE
We may collect the following Personal Data from or about you:
We use this information for our legitimate business interests, including to:
INFORMATION RECEIVED FROM THIRD PARTIES
We may be passed your Personal Data from third parties who we work closely with. In such cases, the third party is responsible for obtaining the relevant consents to ensure you are happy with how your Personal Data will be used.
We may share your Personal Data with our supplies as necessary for our business activities, such as managing our client relationship system. In all cases we will have a written processor agreement with these companies safeguarding your Personal Data, including that it may only be processed for the purposes of that agreement and on our instructions.
We may also disclose your Personal Data:
SECURITY, DATA TRANSFERS AND DATA RETENTION
We take steps to protect your Personal Data from unauthorised access and against unlawful processing, accidental loss, destruction and damage. We will only keep your Personal Data for as long as we reasonably require and, in any event, only for as long as Data Protection Legislation allows.
Where we transfer your Personal Data outside the EEA (including the United Kingdom post-Brexit) we will ensure that we have appropriate safeguards in place including a valid legal ground for the transfer under EU law and a processing agreement with any processor that safeguards your Personal Data, including that it may only be processed for the purposes of that agreement and on our instructions.
The nature of the Internet is such that it is not a secure medium so Blue Whale cannot guarantee the security of any Personal Data transmitted thereon. Blue Whale does not accept responsibility for unauthorised access to such data by a third party.
You have the right to ask whether Blue Whale processes your Personal Data and to request a copy, and in certain circumstances to object to the processing of your Personal Data, to correct it, to restrict its processing and to port your Personal Data to another controller. For requests of this nature please email GDPR@bluewhale.com
We will respond to your request within 30 days. You also have the right to lodge a complaint with the supervisory authority although we would hope you would contact us to give us the opportunity to resolve any issue.
Where processing is based on your consent, you may also withdraw your consent at any time. You have the right to object to direct marketing at any time. To remove yourself from our marketing mail list, please use the unsubscribe link.
CHANGES TO THIS POLICY