This privacy notice aims to give you information on how ABS collects and processes your personal data, the purposes for which we use this and the way in which the data is handled.
It is important to read this privacy notice together with any other privacy or fair processing notice we may provide on specific occasion, for example where you or the business you work for engages us to provide a service.
The ABS is the controller and responsible for your personal data. If you have any questions in relation to this privacy notice including any request to exercise your rights please contact us.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:
We may collect personal data about you if you:
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
We use different methods to collect data from and about you including through:
We will collect personal data from you, your representative and/or your contact person such as your full name, job title, email address, phone number.
Most of the personal data is obtained directly from you. In addition, we will collect personal data from other public sources such as credit reference agencies.
We use this information to review/assess your suitability as a Business Partner or service provider, to comply with our legal obligations, to detect investigate, report, and seek to prevent fraud and anti-money laundering, for example through know- your-customer checks, AML screening and other identity checks and to meet our obligations under any contracts we have with you, we may also need to conduct credit and fraud checks on your business and certain officers of your business, such as directors.
If you send to, or receive emails from us, we may monitor their content to ensure compliance with our internal policies and to protect our business.
We will only collect, use and share your personal data where we are satisfied that we have an appropriate legal basis to do this. Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
In most of the cases, the provision of your personal data is not required by a statutory or contractual obligation. However, where applicable, the provision of your personal data will be necessary to enter into a contract with ABS or to receive our products as requested by you.
If you would like to find out more about the legal basis for which we process personal data, please contact us at firstname.lastname@example.org
We may use personal data to let you know about our products services that we believe will be of interest to you and/or provide you with our newsletter. We may contact you by email, post, or telephone or through other communication channels that we think you may find helpful. In all cases, we will respect your preferences for how you would like us to manage marketing activity with you.
As a rule, we will obtain your consent prior to sending you marketing materials. We will only contact you with marketing materials without your prior consent if this is permitted by law.
How you can manage your marketing preferences
To protect privacy rights and to ensure you have control over how we manage marketing with you:
Your Personal Data will be retained as long as it is required for the purposes for which the data is collected e.g. as necessary to provide you with the services and products requested. Once you have terminated the contractual relationship with us and/or you have deleted your account, or, in case you are a User, following the termination of the contractual relationship in the scope of which your personal data was processed, we will permanently remove your personal data unless statutory retention requirements apply (such as for taxation purposes, dosimetry purposes or professional training purposes) or in order to fulfil regulatory requirements. We retain your contact details and interests in our products or services for a longer period of time if ABS is allowed to send you marketing materials. We also retain your personal data if needed to establish, exercise or defend a legal claim, on a need to know basis only.
We have adopted appropriate data collection, storage and processing practices, technical, organisational and security measures designed to protect against unauthorised access, alteration, disclosure or destruction of the personal data that you share with us. For example, such measures include:
As the security of information depends in part on the security of the computer you use to communicate with us and the security you use to protect user IDs and passwords, please take appropriate measures to protect this information.
Your data protection rights
Under data protection law, you have rights including:
Your right of access- You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing- You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability- You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at email@example.com if you wish to make a request.
You also have a right to complain to the UK Information Commissioner’s Office by visiting ico.org.uk, or to the data protection regulator in the country where you live or work.