This privacy notice describes how Alan Mackay Machinery (Forfar) Ltd collects and uses Personal Data, in accordance with the General Data Protection Regulation (GDPR), the data Protection Unit Act and any other applicable data protection law in he Unit Kingdom.
It applies to Personal Data provided to us, both by individuals or by others.
Personal Data is any information relating to an identified or identifiable living person. Words used with first letter capitalisation (eg Personal Data), unless otherwise defined in this Policy, have the same definition and meaning as under data protection law.
Personal interactions are at the core of our business, so we have implemented this policy for reasons of lawfulness, fairness and transparency in relation to our use of Personal Data.
Alan Mackay Machinery (Forfar) Ltd acts as a Controller and Processor of data. As the Controller, we process personal data and determine the purpose for and the means of the processing of personal data. As the Processor, we shall process personal data on behalf of third parties, e.g. Finance Companies, for the purpose of completing Finance Agreements, Haulage Companies for the purpose of transporting customer machinery.
Given the diversity of the services we provide to clients we may process many categories of Personal Data. By way of example, we could collect and process:
Contact and personal details (including name, address, date of birth, employer name, contact title, phone, e-mail and other business or family contact details.
Income and other financial related details.
We will only collect such Personal Data that is necessary for us to perform our services and we ask our clients only to share such Personal Data as required for that purpose.
Many of our services require us to process Personal Data for purposes necessary for the performance of our contract with our clients. For example, this may include submitting personal information to a Finance Company for the purpose of fulfilling a contract.
We will process Personal Data as necessary to comply with any relevant legal obligations.
We are also to keep certain records to demonstrate that our services are provided in compliance with our legal, regulatory and professional obligations.
We retain the Personal Data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation). In the absence of specific legal, regulatory or contractual requirements, our standard retention period for records is 2 years.
We take the security of all the data we hold very seriously. We have a framework of policies, procedures and training in place covering data protection, confidentiality and security and regularly review the appropriateness of the measures we have in place to keep the data we hold secure. We have put in place appropriate security measures to prevent Personal Data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to Personal Data to those employees, agents and other third parties who have a business need to know, and out IT systems operate on a ‘least privileged’ basis by default. Third parties will only process Personal Data on our instructions and they are subject to a duty of confidentiality.
We have in place procedures to deal with any suspected data security breach and will notify any affected Data subject and any applicable regulator of a suspected breach where we are legally required to do so.
Where we process Personal Data based on consent, individuals have a right to withdraw consent at any time. To withdraw consent to our processing of your Personal Data please e-mail Irene Mackay at Alan Mackay Machinery (Forfar) Ltd.
This privacy statement was last updated on 12th June 2019.