Guernsey Policy and Economics Group LBG (GPEG)
PERSONAL INFORMATION COLLECTION STATEMENT
We only collect information that is required for the provision of our services or is required by Law. The information collected from you will only be used for the purpose of processing your enquiry, invitations to events, distribution of publications and general correspondence. We collect and maintain a variety of personal data including names, email addresses, business addresses, demographic information such as the industry sector of the business. We do not collect personal data about individuals except when there is a legitimate business requirement or when such information is provided on a voluntary basis.
We treat the information you give us freely as private and you have the right to access any information we have about you at any time to check whether it is accurate and up to date. If you wish to be given any information we hold about you, please contact us by emailing email@example.com.
DATA STORAGE & RETENTION
The personal data collected is stored in our CRM system and other appropriate data management systems, both paper based and electronic. At regular intervals, we will (a) review the length of time we keep your personal data for, (b) consider the purpose or purposes for which we hold your personal data for in deciding whether (and for how long) to retain it, (c) securely delete information that is no longer needed for that purpose or those purposes and (d) update, archive or securely delete information if it goes out of date.
SECURITY & DISCLOSURE TO THIRD PARTIES
Measures are implemented to preserve the confidentiality, integrity and availability of the personal information. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to only those employees, contractors or agents who have a legitimate business need to have access to that data.
DATA SUBJECT ACCESS REQUESTS
You have the right to access your personal data held by us (“subject access request”). You may request from us a list of the categories of personal information held about you. Subject access requests must be made in writing to the details below. We will endeavour to respond to the request within a reasonable period and in any event within 4 weeks as required by the relevant provisions in the Data Protection (Guernsey) Law 2018.
It is important that the personal data we hold about you is accurate and current. We will take all reasonable measures to ensure that the personal data we hold about you is accurate. We have also implemented procedures to enable you to review and correct your personal information, should there be any changes to your circumstances or errors in the gathered data. When you make a request to access or review the personal data that we hold about you, we will request you to verify your identity before the request can be fulfilled.
We may use third party provided tools to manage our social media interactions. If you send us a private or direct message via social media the message may be stored by on these platforms. Like other personal data, these direct messages will not be shared with any other organisations.
In addition to the rights of access, review and correction, you have the right to object to your personal data being processed for any particular purpose, or to request that we stop using your information. If you wish to exercise these rights, please e-mail firstname.lastname@example.org. If you have any further concerns about how we use your personal data, you also have the right to make a complaint at any time to the Office of the Information Commissioner, the data protection authority. Please visit www.odpa.gg for more details on your data protection rights and how to contact them.