NOTE ON GDPR TO CLIENTS AND SUPPLIERS OF ZIPDECK
We take our data protection obligations seriously and want to give you the following fair processing information about how we process your personal data.
The parties acknowledge that for the purposes of the Data Protection Legislation, the Customer is the data controller and the Supplier – Slide Clinic Digital Ltd (the founders, staff and associates www.zipdeck.co) is the data processor (where Data Controller and Data Processor have the meanings as defined in the Data Protection Legislation). We don’t have a Data Protection Officer but please contact Spencer Lambert if you have any enquiries.
The purposes of the processing. We process your personal data in order to carry out our services in providing communications expertise and any other activities which a client or supplier might reasonably expect us legitimately to carry out.
The lawful basis for the processing. We rely on our legitimate interest under Article 6 (2) as the lawful gateway to process this personal data.
The categories of personal data obtained. We may process the following personal data about you:
Your name, address, email address, telephone number, VAT number and bank details (if applicable)
The recipients or categories of recipients of the personal data. Your personal data will only be seen by authorised individuals within Zipdeck, our legal and professional advisers, and third parties to whom we have a legal and/or statutory obligation to supply this information.
The retention periods for the personal data. We will retain your personal data for so long as we are required to do so either by statute or regulation. This period is often, but not always, 7 years. Thereafter, being mindful of our obligations to minimise data where possible, we will retain your personal data only for so long as we reasonably consider justifiable.
The rights available to individuals in respect of the processing. As a data subject you have the following rights:
• The right to be informed – articles 12, 13, 14
• The right of access – article 15
• The right to rectification – article 16
• The right to erasure – article 17
• The right to data portability – article 20
• The right to object to processing for direct marketing or personal profiling or automated decision making- article 21
• The right to restriction of processing during disputes – article 18.
• The details of whether individuals are under a statutory or contractual obligation to provide the personal data. We are under a statutory obligation to provide a copy of our accounts to HMRC at financial year end.