NE MOTORS LTD
This Privacy Notice tells you what to expect in relation to ‘Personal Data’ (or ‘personal information’) about you, which is collected, handled, processed and stored by us. The processing of Personal Data is governed by the General Data Protection Regulation 2016/679 (the “GDPR”).
The law requires that eight data protection principles are followed in the handling of personal data.
These are that personal data must be:
- Fairly, transparently and lawfully processed.
- Obtained and processed for limited purposes and not in any manner incompatible with those purposes.
- Adequate, relevant and limited to only data that is necessary to perform the purpose for which it was obtained.
- Accurate and up to date.
- Not kept for longer than is necessary.
- Processed in accordance with the data subject's rights.
- Not transferred outside of the EEA or between countries without adequate protection.
We are committed to following these principles and will be open and transparent about the purposes for which we will use your data.
Who are we?
NE Motors Ltd
Company Number: 8563136
VAT Number: 398 7646 73
Tel: 01749 830132/830833
ICO Reg: ZA 317606
Data Protection Officer/Representative: Barley Edgerley, Director
What is Personal Data?
The GDPR applies to ‘personal data’ meaning any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier.
This definition provides for a wide range of personal identifiers to constitute personal data, including name, identification number, location data or online identifier, reflecting changes in technology and the way organisations collect information about people.
The GDPR applies to both automated personal data and to manual filing systems where personal data are accessible according to specific criteria. This could include chronologically ordered sets of manual records containing personal data.
Personal data that has been pseudonymised – e.g. key-coded – can fall within the scope of the GDPR depending on how difficult it is to attribute the pseudonym to a particular individual.
Please note we do not store sensitive personal data.
How your data is processed:
Data held by NE Motors Ltd: Name, contact numbers, address & e-mail. Data held under legal obligations can be but is not limited too – Drivers licence number, name, address & V5 document reference number.
How we collect your data: Information given freely by individual on the understanding that we will only contact them when their vehicle is in for repair or with important information at other times such as recall news or MOT expiry.
Legal Basis for processing your Personal Data:
We operate under the following legal basis' for processing your personal data;
The individual has given clear consent for us to process their personal data for a specific purpose.
Consent is given verbally from the individual that NE Motors Ltd can store their data and contact them if necessary. Customers have a right to withdraw their consent or request a copy of any data we hold whenever they wish, for no charge.
The processing is necessary for us to comply with the law.
We must store some customer data to provide up to date records to VOSA and the DVLA. We must also collect and store other extra data in order to gain security access to their vehicle (at their request) which includes their driving licence number.
NE Motors Ltd must also collect customer information for insurance purposes when they are using a courtesy vehicle.
How we protect your Personal Data:
We protect your data in compliance with GDPR by:
Storing your data on a password, cyber firewall and physically alarmed computer.
Only store relevant, up to date information and destroy out of date information.
Protect your data from loss, misuse or unauthorised access.
Monitor for breaches and have an up to date breach plan.
Monitor and assess 3rd parties requesting your data for legal obligations.
How we use your personal data:
Your data will be stored in a secure database and will not be sold to third parties, we will use it to contact you about your vehicle and any products or services we feel may be of interest to you.
Who else has access to the data we hold on you:
Some third parties may need access to your data we will only provide it to them through our legal obligations these third parties may include but are not limited to:
Licensed credit reference agencies
Any statutory, governmental or regulatory body that requests Personal Data and that we are obliged by Law or regulation, to provide.
3rd party Institutions which you may have entered into a contract with, whilst in the course of your engagement with us. You should be aware that the 3rd party will become the ‘data controller’ of any of the Personal Data that is provided to them either by you or by us, with your consent, however if your engagement with us were to end, this would not end your engagement with the 3rd party.
If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to the new purpose and wherever necessary seek your permission for doing so.
How long we will retain your data:
We will only store your data as long as it is still relevant and you are still using us for the products and services we offer, your information will be permanently destroyed at your request or if we deem you no longer active as a customer (this may be over a year after you have previously used our services due to the nature of our business). We will however, store your data for longer if we have a legal obligation to do so, this is to ensure that both yourself and our business are conducting our data storage in a compliant manner.
Your rights as the individual:
The GDPR provides the following rights to you as an individual:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling.
(Please go to www.ico.org.uk for further information regarding your rights including detailed explanations of the above.)
You can also contact the Information Commissioners Office on 0303 123 1113 or email - https://ico.org.uk/global/contact-us/email/ or write to them at; The information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.