GDPR stands for General Data Protection Regulation and replaces the previous Data Protection. It came into effect on 1 January 2020.
GDPR states that personal data should be ‘processed fairly and lawfully’ and ‘collected for specified and legitimate purposes’. Also that individuals’ data is not processed without their knowledge and processed only with their ‘explicit’ consent. GDPR covers personal data relating to individuals. Individuals have the right to know what information is held about them and where it is stored. There are rights for individuals:
The Right to be Informed
An individual has the right to know what personal data we hold.
The Right of Access and Right to Erasure
An individual can request a copy of all the personal data held about them within our organisation (Subject Access Request) and will be allowed to have all their data deleted or returned to them, if they so wish, within a month of the request.
DTR Customs Ltd will keep personal contact details for one year after a customers install has been completed, unless they ask to be kept informed about DTR Customs Ltd offers and information.
The Right to Strict Processing
Individuals have the right to object to us processing their data. This means that records can be stored but not used for communications.
The Right to Data Portability
DTR Customs Ltd requires personal data to be transferred from one system to another, for example to:
Storage and Use of Personal Data
All paper copies of data are kept in a locked filing cabinet at the data controllers’ addresses. These paper copies will be shredded after the retention period.
No photos / video footage will be displayed without prior consent of the customer (please see terms and conditions)
The personal data we collect for an initial quotation is input on a database which is used solely for communication and billing purposes.