Data Protection Policy for the Bill Moss Partnership Limited
At the Bill Moss Partnership, privacy and data protection rights are very important to us.
The Bill Moss Partnership Limited is registered with the Office of the Data Protection Commissioner under the Data Protection Act 1998-2003 as a data controller and data processor and all personal data will be maintained in accordance with the obligations of that Act.
Data Protection is the safeguarding of the privacy rights of individuals in relation to the processing of personal data, in both paper and electronic format. The Data Protection Acts 1988 and 2003 lay down strict rules about the way in which personal data and sensitive personal data are collected, accessed, used and disclosed. The Data Protection Acts also permit individuals to access their personal data on request and confer on individuals the right to have their personal data amended if found to be incorrect.
This document outlines the Bill Moss Partnership’s policy to help ensure that we comply with the Data Protection Acts.
Inquiries about this Data Protection Policy should be made to: Data Protection Co-Ordinator, The Bill Moss Partnership Limited, 24/26 Bridge Street, Ringsend, Dublin 4, Ireland.
Data Protection Policy
Purpose of this Policy
This policy is a statement of the Bill Moss Partnership’s commitment to protect the rights and privacy of individuals in accordance with the Data Protection Regulation.
Collection of Information
We collect and use information to provide the following services:
- To undertake advertising, marketing, direct marketing and public relation exercises.
- To provide a full range of database management services, including supplying mainly business data, some consumer data, data profiling, data hygiene, data capture and address validation and correction.
- To perform accounting and other record-keeping functions.
- To provide personnel and payroll administration services.
- Use of name and address data for identity verification for clients seeking credit.
Data Protection Principles
We shall perform our responsibilities under the Data Protection Acts in accordance with the following Six Data Protection Principles:
- Lawfulness, Fairness and Transparency
We shall obtain and process business and personal data fairly, lawfully and in a transparent manner in accordance with statutory and other legal obligations
- Purpose Limitation
We shall keep business and personal data collected for specified, explicit and legitimate purposes. Personal data will only be processed in a manner compatible with these purposes as defined in the company’s personal data usage as outlined above.
- Data Minimisation
We shall use and disclose business and personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which we collected the data
We adopt procedures that ensure high levels of data accuracy, completeness and that data is kept up to date. We take every reasonable step to ensure that personal data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay. We also ensure that Disaster Recovery processes are in place
- Storage Limitation
We have a retention policy for personal data. We ensure that business and personal data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data is processed. Personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, research or statistical purposes in accordance with rticle 89(1)
- Integrity and Confidentiality
We will take appropriate measures to ensure all data is processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized and unlawful processing and against accidental loss, destruction or damage by using appropriate technical and organisational measures. We also ensure that Disaster Recovery processes are in place
Subject Access Request
We undertake to adopt procedures to ensure that data subjects can exercise their rights under the Data Protection legislation to access their data. Requests should be forwarded to the Data Protection Officer where they will be processed as quickly and efficiently as possible, but within not more than 40 days from receipt of the request. A formal written application should be addressed to:- The Data Protection Officer, The Bill Moss Partnership Limited, 24/26 Bridge Street, Ringsend, Dublin 4.
Overall responsibility for ensuring compliance with Data Protection Acts rest with the Bill Moss Partnership Limited. However, our responsibility varies depending upon whether we are acting as either a data controller or a data processor. All employees and contractors of the Bill Moss Partnership who separately collect, control or process the content and use of personal data are individually responsible for compliance with the Data Protection Policy. Failure to comply would result in disciplinary action being taken. The Data Protection Co-Coordinator is the Bill Moss Partnership’s Data Protection Officer who, along with the assistance of top Management, coordinates the provision of support, assistance, advice and training within the company to ensure that personnel are in a position to comply with the legislation.
Procedures and Guidelines
The Bill Moss Partnership Limited is firmly committed to ensuring personal privacy and compliance with the Data Protection Acts, including the provision of best practice guidelines and procedures in relation to all aspects of Data Protection.
This Data Protection Policy will be reviewed regularly in light of any legislative or other relevant developments.
This Data Protection Policy is available on the company’s website: www.bill-moss.com
2. Types of Information Collected
We retain two types of information:
This is data that identifies you or can be used to identify or contact you and may include your name, address, email address, user IP addresses in circumstances where they have not been deleted, clipped or anonymised, telephone number. Such information is only collected from you if you voluntarily submit it to us.
Like most websites, we gather statistical and other analytical information collected on an aggregate basis of all visitors to our website. This Non-Personal Data comprises information that cannot be used to identify or contact you, such as demographic information regarding, for example, user IP addresses where they have been clipped or anonymised, browser types and other anonymous statistical data involving the use of our website.
3. Purposes for which we hold your Information.
We use the Non-Personal Data gathered from visitors to our website in an aggregate form to get a better understanding of where our visitors come from and to help us better design and organise our website.
We will process any Personal Data you provide to us for the following purposes:
- to provide you with information on our services you may have requested;
- to contact you if required in connection with your query or to respond to any communications you might send to us;
- to contact you by email in relation to news, events, services, products and offers available within Bill Moss Partnership and other related third party offerings where appropriate.
4. Disclosure of Information to Third Parties
We may provide Non-Personal Data to third parties, where such information is combined with similar information of other users of our website. For example, we might inform third parties regarding the number of unique users who visit our website, the demographic breakdown of our community users of our website, or the activities that visitors to our website engage in while on our website. The third parties to whom we may provide this information may include potential or actual advertisers, providers of advertising services (including website tracking services), commercial partners, sponsors, licensees, researchers and other similar parties.
We will not disclose your Personal Data to third parties unless you have consented to this disclosure or unless the third party is required to fulfil your query (in such circumstances, the third party is bound by similar data protection requirements. We will disclose your Personal Data if we believe in good faith that we are required to disclose it in order to comply with any applicable law, a summons, a search warrant, a court or regulatory order, or other statutory requirement.
5. Sale of Business
Your Personal Data is held on secure servers hosted by our Internet Service Provider. The nature of the Internet is such that we cannot guarantee or warrant the security of any information you transmit to us via the Internet. No data transmission over the Internet can be guaranteed to be 100% secure. However, we will take all reasonable steps (including appropriate technical and organisational measures) to protect your Personal Data.
7. Updating, Verifying and Deleting Personal Data
You may inform us of any changes in your Personal Data, and in accordance with our obligations under the Data Protection Acts 1988 and 2002 we will update or delete your Personal Data accordingly. To find out what Personal Data we hold on you or to have your Personal Data updated, amended or removed from our database, please email us at [email protected]
Any such data subject requests may be subject to the prescribed fee.
What are Cookies?
We use a number of different cookies on our site and we operate an ‘implied consent’ policy, meaning that we assume you are happy with this usage. This can be changed by disabling or deleting the cookies, or using your browser’s anonymous usage setting (e.g. “Incognito Mode” in Google Chrome).
For further information on how to manage and opt-out of cookies please visit: http://www.aboutcookies.org/Default.aspx?page=1
First Party Cookies: These cookies are set by this website directly and include web analytics tools like Google Analytics which are used to collect anonymous information about how users browse the site. This cannot be used to identify personal information (e.g. name or address).
Certain cookies are deemed strictly necessary to the working of the website. For brochure sites and ecommerce sites a session cookie is necessary for remembering your log-in for you, whether you are a registered user or not or remembering what has been put in the shopping basket. If this cookie is disabled it will disrupt the functionality on the site.
Third Party Cookies: These cookies are set on your machine by external websites whose services are used on this site. Cookies of this type include the social network content sharing buttons across the site (e.g. Youtube and Facebook). To facilitate the implementation of these buttons, and connect them to the relevant social networks and external sites, there are scripts from domains outside of our website which we do not control and cannot access. You should check the third party websites for more information about these cookies.