1.1 Curotec Team Ltd (“we”/“us”/“our” etc) is committed to protecting the privacy of personal data collected in the course of our business. We will be the “controller” or “data controller” of all personal data held in respect of this Policy.
1.2 We will always comply with relevant data protection legislation, including the Data Protection Act 2018 (“DPA”) and General Data Protection Regulation (“GDPR”).
2. DATA PROCESSING
2.1 We will collect, use and store personal data, as set out in this Policy, as necessary to exercise our legitimate business interests (or to carry out other functions with specific consent) to record and monitor individuals’ exposure to mechanical vibration.
2.2 We will not keep personal data for longer than is necessary for the purposes specified in this Policy. Where it is no longer required, it will be pseudonymised, anonymised, destroyed or erased as appropriate.
2.3 We will not sell personal data and we will only make it available to third parties where:
(a) we use a processor, in which case we will ensure that the processor complies with this Policy and all relevant data protection legislation;
(b) we are required to do so by law;
(c) we sell any part of our business or assets (in which case we may disclose your personal data confidentially to the prospective buyer as appropriate in accordance with our legitimate interests).
2.4 We have implemented generally accepted standards of technology and operational security in order to protect personal data from loss, misuse, or unauthorised alteration or destruction. We will only transfer personal data outside the UK or EEA subject to appropriate safeguards such as standard data protection clauses.
3. WHAT INFORMATION DO WE COLLECT AND WHY?
3.1 We will only collect personal data to the extent that it is required for the specific purpose set out above and in accordance with our legitimate business interests and legal obligations:
(a) employee name, payroll number, employer details, site details – to identify individuals
(b) daily limits hand arm vibration, actual daily exposure hand arm vibration, daily limits whole body vibration, actual daily exposure whole body vibration, equipment usage log – to monitor exposure to mechanical vibration
(c) details of interactions with us – to provide, monitor and improve customer service.
3.2 We will hold personal data on our systems for as long as:
(a) an individual’s profile on our system remains valid; and/or
(b) any relevant contracts are live; and/or
(c) is necessary to comply with our legitimate business interests; and/or
(d) is necessary to comply with our legal obligations; and/or
(e) we have appropriate consent to do so.
4.1 Each individual whose personal information we hold has the following rights. Please send all requests in respect of these rights to our Data Protection Manager: Joanne Lelliott.
(a) to access their personal data;
(b) to be provided with information about how their personal data is processed (this information is set out in this Policy);
(c) to have their personal data corrected where necessary (please contact our Data Protection Manager promptly should you become aware of any incorrect or out-of-date information);
(d) to have their personal data erased in certain circumstances (please refer to the appropriate data protection legislation or consult the ICO for details);
(e) to object to or restrict how their personal data is processed.
4.2 Any questions, comments or alleged data breaches should be raised with our Data Protection Manager Joanne Lelliott:
or the Information Commissioner
Information Commissioner’s Office
Cheshire SK9 5AF
0303 123 1113.
4.3 We reserve the right to amend this Policy from time to time without prior notice. You are advised to check the Site regularly for any amendments (but NB amendments will not be made retrospectively).