Connectd 2023.
1. Scope
All processing of personal data by Connectd is within the scope of this procedure.
2. Definition
Personal data here follows the definition in Article 4 (1) UK GDPR“‘personal data’ means any information relating to an identified or identifiablenatural person (‘data subject’); an identifiable natural person is one who can beidentified, directly or indirectly, in particular by reference to an identifier such as aname, an identification number, location data, an online identifier or to one ormore factors specific to the physical, physiological, genetic, mental, economic,cultural or social identity of that natural person”
3. Responsibilities
3.1 The Chief Commercial Officer is responsible for ensuring that the privacy notice(s)is correct and that mechanisms exist such as having the Privacy Notice(s) onConnectd website to make all data subjects aware of the contents of this noticeprior Connectd commencing collection of their data.
4. Procedure
4.1 When personal data collected from a data subject that is subject to the jurisdiction of the GPDR or the UK GDPR, the data subject will be given the following information at the time the information is collected:4.1.1 Connects’s name and contact details, and contact details of the DataProtection Officer/Data Protection Contact and/or any data protection representatives;
4.1.2 The purpose(s) for the intended processing of personal data and the associated lawful bases for processing;
4.1.3 Where relevant, Connectd’s legitimate interests that provide the legal basis for the processing;
4.1.4 Potential recipients of personal data;
4.1.5 Any information regarding the intention to disclose personal data to thirdparties and whether it is transferred outside the UK. In such circumstances, Connectd will provide information on the safeguards in place and how the data subject can also obtain a copy of these-safeguards;
4.1.6 The retention periods applicable to the personal data;
4.1.7 The rights available to the data subject in respect of the processing ,including the rights to withdraw consent and lodge a complaint with a supervisory authority within the UK:
4.1.8 Details of whether individuals are under a statutory or contractual obligation to provide the personal data;
4.1.9 Details about any automated decision-making, including profiling that occurs;
4.1.10 Any information on website technologies used to collect personal data about the data subject;
4.1.11 Any other information required to demonstrate that the processing is fair and transparent.
4.2 All information provided to the data subject is in an easily accessible format usingclear and plain language, especially for personal data addressed to a child.
4.3 When personal data has been obtained from a source other than the data subject. Connectd will also describe the categories of information collected as well as the source of the personal data.
