2. When will we disclose your personal data to others?
We may share your personal data with the parties set out below for the purposes set out in the table above. These can include:
Internal Third Parties who are engaged by NWMS to deliver services directly to its clients. Those consultants are described as administrators or mediators. We may also engage secretaries and paralegals to provide services to clients on our behalf. We engage these people, and they need to process personal data on our behalf, in order to perform any contract we have with you and also to ensure the proper administration of our business.
External Third Parties such as suppliers and sub-contractors for the purpose of performing any contract we have with you or them.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
3. International transfers of data
We do not transfer your personal data outside the European Economic Area (EEA).
4. Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
5. Data retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements
6. Your rights
6.1 Under data protection laws you have the following fundamental rights:
(a) The right to access the personal data we hold about you;
(b) The right to have your personal data corrected if there are errors or inaccuracies in it, or your personal data is incomplete;
(c) The right to restrict the processing we carry out in relation to your personal data;
(d) The right to object to the processing we carry out in relation to your personal data;
(e) The right to have the personal data we hold about you provided to you in a useable format;
(f) The right to complain to a supervisory authority (in the UK this is the Information Commissioner’s Office) about how and/or why we are processing your personal data;
(g) The right to tell us you no longer consent to us processing your personal data. In practice you will usually agree in advance to us using your personal data for marketing purposes and if you no longer wish us to use your personal data for marketing purposes, you can opt out of receiving such marketing messages at any time. You can do this either by unsubscribing from the marketing messages we send you, notifying us in writing at email@example.com.
6.2 You can ask us to provide you with details of any personal data we hold about you. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
6.3 Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
6.4 If you think that any of the data we hold about you is incorrect or inaccurate, you can contact us to correct such data. Please contact us at firstname.lastname@example.org these purposes.
7. Any questions?
Data Protection Officer
North West Mediation Solutions Limited