The EU General Data Protection Regulation (GDPR) is a legal requirement in the UK and across the European Union. It combines an array of current data sharing requirements into one single legislation and allows users to have more control over how their personal data is stored and distributed. Please find more information on the International Commissioners Office site and their Guide to GDPR.
Data controllers, such as Chromaview (Chromacon UK), must now prove their awareness of the importance of protecting personally identifiable data. Persons providing their data to processors must be made aware of how their data is being used and stored before the information is disclosed.
Data will be provided during account applications and will be processed in the interest of completing the necessary checks required to approve or decline an account.
Data provided will be viewed by the relevant department to help determine the success of an account application. We may carry out credit checks and identity checks when you apply for services for you or your business and we may share your personal information with Credit Reference Agencies to help us with this. We may continue to share your personal data with Credit Reference Agencies as long as you are a customer. If we ask Credit Reference Agencies about you or your business, they will note it on your file. We process personal data to comply with our legal obligations and statutory requirements. We process personal data so as to safeguard the legitimate interests pursued by us or a third party.
We will keep your personal data for as long as we have a relationship with you as an individual or as a business. Once this relationship has ended we generally keep your data for up to two (2) years. We keep prospective customer data for six (6) months from the date of notification of rejection.
Account data will also be stored for the purposes of aiding successful transactions and order delivery. Data stored after the point of transaction will be for remarketing purposes (if the user has opted-in to receiving such content) and to ease the ordering process for returning customers.
GDPR requires data processors such as Chromaview to give absolute clarity on how information is being stored and how data is used. All the software and programmes that come into contact with a site user’s information has been detailed in our Data Sharing Policy.
Our Commitment to Your Individual Rights
As the owner and subject of the data in question, you have certain rights and control over the details you input into www.chromaview.co.uk. As the data controller of information provided, we are required to uphold your right to the following conditions:
- Right to have data forgotten: you can request for your data to be immediately removed from our database and servers with all your information being completely removed and you being notified of this successful deletion.
- Right to object from data inclusion: this allows clients to opt-out of certain actions or processes that they do not want their data to be a part of. Clients are free to opt-in and opt-out of marketing and correspondence at any time.
- Right to data rectification: you are able to amend and update any information that you believe to be incorrect or no longer valid. This includes but not limited to, change of address or name. This promotes the accuracy of our client information, increasing its validity.
- Right to access data: this permits you to have full transparency and control over how your data is handled. You are able to request additional information on what data is being stored and for what purposes. It is our obligation to provide you with this information in full.
- Right to data portability: this allows you to request your data be transferred between controllers. When requested, we will be able to aid the transfer of your personal information to another data processor. This involves providing your information in a machine-friendly format.
HOW TO REQUEST THE DELETION OF YOUR DATA
Should you wish to have your data removed from the Chromaview database, please contact our customer services team via email at sales@chromaview.co.uk with your request. Our team will remove all personally identifiable information from our system that has been included via your account and previous orders placed. Historical data such as the number of orders placed and products included are kept for analytical training purposes, however, these will be kept anonymous.
You can find further information regarding our Privacy Policy and Data Sharing Policy. If after reading this information you have any questions, queries or requests regarding the movement of your personal information then please contact us at sales@chromaview.co.uk.