Description
Small Business Privacy Notice
Individuals have the right to be informed about the collection and use of their personal data. This is a key transparency requirement under the GDPR.
The policy will include:
-
The name and contact details of our organisation.
-
The name and contact details of our representative (if applicable).
-
The contact details of our data protection officer (if applicable).
-
The purposes of the processing.
-
The lawful basis for the processing.
-
The legitimate interests for the processing (if applicable).
-
The categories of personal data obtained (if the personal data is not obtained from the individual it relates to).
-
The recipients or categories of recipients of the personal data.
-
The details of transfers of the personal data to any third countries or international organisations (if applicable).
-
The retention periods for the personal data.
-
The rights available to individuals in respect of the processing.
-
The right to withdraw consent (if applicable).
-
The right to lodge a complaint with a supervisory authority.
-
The source of the personal data (if the personal data is not obtained from the individual it relates to).
-
The details of whether individuals are under a statutory or contractual obligation to provide the personal data (if applicable, and if the personal data is collected from the individual it relates to).
-
The details of the existence of automated decision-making, including profiling (if applicable).

