Your privacy
is important to us

We may need to use some information about you:

• to deliver our services to you
• to continue to offer you customer support
• to investigate any concerns or complaints you may have
• to maintain the quality of services
• to assist with research and planning of new services
• to keep track of expenses and other service-related costs
• for employee training and HR

There are several legal reasons why we need to collect and use your personal information. Each section of this privacy notice explains which legal reason is being used. Where we collect and use personal information, we do so using one of the following lawful bases:

• you, or your legal representative, have given consent
• you have entered into a contract with us
• it is necessary to protect someone in an emergency
• it is required by law
• it is necessary for employment purposes
• you have made your information publicly available

The law gives you several rights to control what personal information we collect about you and how we use it.

Under the GDPR you have the following legal rights, these are your:

Right to be informed

Freevacy does not usually collect data from any third party or share data with anyone else, without your prior knowledge. An example of this is where your employer has booked you onto a course. Should the occasion arise where we obtained your data from a third party, (such as another training provider), we will notify you as soon as possible or at least within one month, or where we plan to communicate with you, at that first communication. If we were to share that data with someone else, we would tell you, at the latest when that data is shared.

Right to access information we hold on you

You have the right to ask if we hold any personal data relating to you and if that is the case you are entitled to receive a copy of all this information. We are also obligated to inform you about the: [how we collect and process personal data]

• The purposes of the processing
• The sorts of personal data concerned
• Any recipients or types of recipient that your personal data has been or will be disclosed to, including recipients outside the European community
• Where possible, how long your personal data will be stored, or if that is not possible, how to work out how long it will be kept

To request access, you can contact us by letter, electronically or verbally.

Note, before we can release any personal data we hold about to you, you will be required to confirm your identity.

Go to Your personal data for more details about the information we collect and process.

Exempt Data

There are certain situations where the data we hold about you cannot be released. These include any parts of your record which contain:

• Confidential information about other people; or
• If the law believes that giving you the information may stop the prevention or detection of a crime

Right to request a correction

If any of the personal data we hold about you is incorrect, we will correct it as quickly as possible and at least within one month (unless the amount would make it impossible to do so, when we would be entitled to extend the time by up to a further two months).

Note, we will require proof that the information is inaccurate before changing it.

Right to request data is deleted

Where the following apply you may have the right to have any personal data we hold about you erased:

• Freevacy no longer needs your personal data for the purpose it was collected or processed for
• You have withdrawn the consent or explicit consent allowing Freevacy to process your personal data and there is no other legal ground for the processing
• Where you have exercised your ‘right to object’ regarding the processing for direct marketing purposes
• Freevacy had unlawfully processed the data
• The personal data should be erased for compliance with a legal obligation

Right to restrict processing

Where any of the following apply, you have the right to restrict further processing of your personal data:

• You believe the accuracy of the personal data Freevacy holds is inaccurate,
• You believe Freevacy has processed your data unlawfully, but you oppose erasure and requests the restriction of its use instead;
• Where Freevacy no longer needs the personal data, but you require it to be retained for the establishment, exercise or defence of legal claims;
• You have objected to processing regarding public interest or legitimate interests of Freevacy, where the legitimate grounds of the Freevacy do not override your interests.

Right to data portability

Freevacy does not currently have the facilities to provide your personal data in a commonly used and machine-readable format.

Right to object

You have the right to object at any time, to Freevacy processing of your personal data where,

• It relates to direct marketing purposes including any profiling
• Where processing is for scientific or historical research purposes or statistical data.

Rights relating to automated decision making and profiling

You have the right to prevent Freevacy from making any decisions based solely on automated means that could legally affect you, including any profiling.

Should Freevacy ever make a decision relating to you based on automated processing, we ensure that a human review of the decision can be made upon request. We would also supply you with any meaningful information about the logic involved in the decision making as well as the significance and consequences for you of that decision.