In order to Process Personal Data, we must have valid legal grounds to hold and manage it in accordance with Data Protection Legislation.
In relation to our clients, it is likely that our legal ground will be that we are processing personal data, for which they are the Controller, in order to perform the services under our contract with them.
In relation to our employees, our grounds for Processing their Personal Data may be both (1) under contract; and (2) our legitimate interest in holding the data (for example, the need to hold certain employee records).
Where individuals have asked to be added (or opted-in) to our database, our reason for holding their data may be based on their consent (as well as in certain circumstances on our legitimate interest).
Where our processing of Personal Data is based on the Data Subject’s consent, it may be possible for the Data Subject to withdraw that consent (and thereby our ground for holding their Personal Data). In that event, we will stop the processing of their Personal Data.
We will only share your Personal Data with third parties on the same basis: where we have valid legal grounds to do so. We may share your Personal Data where necessary to perform a contract with you, where it is in our legitimate interest to do so or when you have specifically consented to it.
Finally, there are some other valid grounds for Processing (or sharing) Personal Data:
- where there is a legal obligation that we must;
- where it is of vital interest that we should share the Personal data (to protect someone’s life); or
- where it is part of a public task or official function.