DMG Privacy Notice
Your privacy is very important to us, as such we will only process your information in order to fulfil the job that you have tasked us with.
This privacy notice includes the following information:
- Who we are
- The information we collect
- How we use this information
- The legal basis for using this information and processing data
- When this data is shared
- Data security and retention
- Your rights
- How to contact us
This notice applies to any quotes or orders made with DMG. Please read this privacy notice carefully, and if you have any questions contact firstname.lastname@example.org for further information.
By consenting to this privacy notice you are giving us permission to process your personal data specifically for the purposes identified.
Who we are?
We are DMG Electrics, if you have any questions about our privacy notice or any other enquiries, please contact us on email@example.com
What information do we collect?
The personal information we collect is: name, address, contact details. This information is collected when you phone or email DMG to ask for a quote, or to place an order for a job.
How do we use personal information?
We use the information collected above to provide a quality service to our customers and to ensure that we can have an accurate record of orders completed. Please note DMG do not share information with third parties, other than suppliers and sub-contractors if necessary in order to complete your order. DMG will never use personal information for marketing purposes.
What legal basis do we have for processing your personal data?
The legal basis for processing personal data is consent and contractual necessity. When asking for a quote or placing an order with DMG you consent to the use of your personal data in order to deliver a quote to you, or to undertake a job for you. If you decide to use DMG’s services for a job, we store this data in order to meet this contract. We also have a legal obligation to hold account information on jobs completed for seven years.
When do we share personal data?
DMG only share information with third party suppliers and sub-contractors if necessary in order to complete your order. DMG will never use personal information for marketing purposes.
Any personal data shared will be done directly to suppliers via phone or secure email. The subcontractors and suppliers DMG users are also regularly reminded regarding expectations of data protection and retention of personal information shared.
How do we secure personal data?
We secure personal data in the following ways:
- to protect data against accidental loss and to ensure business continuity and disaster recovery – information is stored on a secure email server and backed up regularly
- to prevent unauthorised access, use, destruction or disclosure and to restrict access to personal information – only the DMG staff deemed appropriate have access to personal information stored
- to conduct privacy impact assessments in accordance with the law and our business policies – DMG performs regular reviews on privacy impact to ensure we meet all necessary legislation
- to train staff on data security – DMG provides training to members of staff on data security
- to manage third party risks – any personal data shared will be done directly to suppliers via phone or secure email. The subcontractors and suppliers DMG users are regularly reminded regarding expectations of data protection and retention of personal information
How long do we keep your personal data for?
Personal data is stored by DMG for three years after a quote, and for seven years after a job order, this is in order to provide our service, allow for repeat jobs, and meet our legal obligations to keep accurate records of job history. Data is disposed of securely at the end of this retention period.
Your rights in relation to personal data
Under the GDPR, you have the following rights as a data subjects to access and control your personal data. Please contact DMG Electrics at firstname.lastname@example.org if you would like to exert your rights to:
- access personal information
- correct or delete personal information
- withdraw consent
You also have the right to lodge a complaint with the Information Commissioner’s Office, to do this please visit their website.
We will respond to subject data requests within 28 days from when the request is received.
Data subject rights may be limited if fulfilling the data subject request may expose personal data about another person.
How to contact us?
If you have any questions or concerns about privacy practices, your personal information, or if you wish to file a complaint, please contact us at email@example.com