GENERAL DATA PRIVACY NOTICE OF CRAYDEL GROUP
Craydel Group with its registered offices at Lissarda Business Park, Lissarda, County Cork, Ireland, together with subsidiary and associated companies, (“we”, “our”, “us”) respect your right to privacy and comply with our obligations under the General Data Protection Regulation (EU) 2016/679 (GDPR). The purpose of this privacy statement is to set out how we deal with personal data provided to us through the conduct of business.
How do we collect personal information?
We will collect information from you when you interact with us in person, in writing, by telephone and by email, for example, when you are an actual or potential supplier or if you email us your CV.
We may also receive information from other sources such as third parties who collect personal information from you and pass it on to us, such as job board websites.
Types of Personal Information Collected by Us
Personal information that we hold about you may include names, addresses, email addresses, contact numbers, job title, employer organisation or any other information that you provide to us.
Craydel Group will take all reasonable steps to keep your personal information accurate and, where necessary, up to date. Please notify us at firstname.lastname@example.org if you believe that any of the information we hold about you is incorrect.
Purposes for which we hold your data
We will process any personal data you provide to us for the following purposes:
- To contact you if we are to respond to any communications from you;
- Maintaining business records of services, payments and other transactions for the legitimate purposes of the business, business planning and database management;
- Communicating with you about potential business or career opportunities;
- Obtaining professional services from our third parties, including consultants, auditors, accountants and lawyers;
- Conducting due diligence with regard to actual or potential investment opportunities;
- Evaluating potential candidates for future recruitment and assessing your application if you have applied for a job with us;
- Responding to your enquiries and resolving complaints;
- Compliance with other contractual, legal and regulatory obligations.
Legal Basis for Processing Personal Data
While the majority of interactions and transactions we are involved in are business-to-business, they contain some personal data. To process your data lawfully, we will use your information on one or more of the following grounds:
- You are a party to a contract and processing your personal data is necessary for the performance of a contract;
- It is in our legitimate interests to do so and where such interests are not overridden by your privacy interests;
- It is required for our compliance with legal and regulatory obligations or where disclosures are requested by authorities, regulators or governmental bodies;
- We have obtained your consent where one of the above grounds cannot reasonably be relied upon.
Your personal data will not be sold to third parties, marketing agencies or processed in an unlawful manner. If we seek to use your personal data for a purpose beyond that for which it was originally collected, we will seek your consent or look to rely on another valid legal ground to process your personal information in accordance with applicable law.
Disclosure to third parties/Recipients of your personal data
There are circumstances where we may be compelled or wish to disclose your personal information to third parties. This will only take place in accordance with applicable law and on the basis of one or more of the lawful grounds for processing (detailed above).
We will disclose the personal data of individuals as follows:
- to our affiliated group companies for the purposes as set out in this notice;
- to third parties providing services to us such as our professional advisers (e.g. auditors and lawyers);
- to a party representing an individual (e.g. in response to legal process);
- to competent authorities such as tax authorities, courts, regulators and government agencies where required by law or where otherwise necessary.
Sensitive or Special Category of Personal Data
Certain types of personal data require extra safeguards, in particular information about children, the ‘special categories’ of personal data including racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sexual orientation, genetics, biometrics and criminal offences. We generally do not need this information so please do not send it to us.
Craydel Group will retain personal information for a period that will vary depending on the purposes for which it was collected, as well as the requirements of any applicable law or regulation.
Destruction of data will be carried out in accordance with Craydel Group’s data retention policy.
Third Parties and Overseas Transfers
When your personal data needs to be transferred to an overseas country that is not part of the EEA (European Economic Area) we will always ensure that there are adequate levels of protection with regards to data protection.
Your personal data is held on secure servers. All the endpoints of the company are protected with antivirus and firewall. A password policy is in place to ensure that the data stored on our systems is only accessible to authorised personnel. The passwords are changed on a regular basis. We restrict access to personal information to those employees and third parties who need to know that information for the purposes set out in this Privacy Notice.
The nature of the internet is such that we cannot guarantee or warrant the security of any personal data you provide to us via the internet; any such transmission of data is therefore at your own risk. Once we receive your data, we use technical and physical security measures, including anti-virus protection, to protect your personal data from unauthorised access or disclosure, loss, alteration or destruction.
You have the following rights:
- To be informed about processing of your data – as is set out in this Privacy Statement
- To object to personal data processing (in some circumstances)
- To access to your personal data
- To object to processing of personal data
- To personal data portability (in some circumstances)
- To have your data rectified if it is inaccurate
- Erasure (in some circumstances)
- To restrict processing (in some circumstances)
- To withdraw your consent where that is the legal basis of our processing
- To lodge a complaint with the Data Protection Commissioner.
Amendments to Privacy Statement
Craydel Group reserves the right to make amendments to this Privacy Statement without notice.
Should you have any queries about this privacy notice, or about the way we process your personal data, please email email@example.com.