As a means to provide legal and business updates to you and to invite you to profressional or social events, e3 employment law LLP ("e3") holds information relating to you on database. This means that e3 processes some personal data relating to you.
Many individuals would have a reasonable understanding of the different ways in which they could expect their personal data to be processed within a database. This might include:
data relating to your contact details; and
data relating to your role;
Equally, however, some individuals may not. Please forgive us if you fully appreciate all of the following information but we prefer to err on the side of transparency for those who might not.
We intend that this notice will provide transparency and enable every individual to understand how and why their personal data is used by us. e3 wants you to have maximum visibility, understanding and control over our processing of your personal data relating to your use of our website.
This document is intended to be written concisely and in plain language so that the information is readily accessible and understandable. (If you do not understand any element or have any queries please contact firstname.lastname@example.org).
What is my ‘personal data’?
Your personal data is simply any information that relates to you as an identifiable individual. This might range from your name to your email address at work.
What is data processing?
Data processing means any action which is performed on data including collection, recording, storing, viewing, altering, transmitting, and disclosing right through to erasure or destruction of the data.
Who is responsible for my personal data?
The Data Controller responsible for your personal data is e3 employment law LLP. You can contact the Data Controller at Delphian House, Riverside, New Bailey Street, Manchester M3 5FS and/or by emailing email@example.com..
We are not required to have a Data Protection Officer by the relevant data protection legislation. Instead all of the e3 Partners share responsibility for data protection issues. (If a Data Protection Officer is appointed at some point in the future then you will be notified of the appropriate contact details.)
Please ensure that you read this Privacy Notice carefully and any other similar notice we may provide to you from time to time when we collect or process personal information about you.
Links to websites within communications?
Please note that our business and legal updates may contain links to third party websites which are provided for your convenience. We are only responsible for our own privacy practices and security of our own platforms and therefore we recommend that you check the privacy and security policies of each and every other website / digital platform that you visit.
We may provide links to our own website. In common with many other website operators, we use standard technology called ‘cookies’ on our website. Cookies are small pieces of information that are stored by the browser on your computer’s hard drive and they are used to record how you navigate websites on each visit.
What information is collected in order to provide legal and business updates?
All personal information that we collect about you will be recorded, used and protected by us in accordance with applicable data protection legislation, including the General Data Protection Regulation and this Privacy Notice.
We may supplement the information that you provide with other information that we obtain from our dealings with you, however we will not use that information for purposes which are not clear when you provide your details.
We may collect the following information about you: -
Name of your organisation (if applicable)
Any additional information provided by you (such as follow up enquiries or questions)
Receipt of different communications
Attendance at specific events
How is the information collected?
We may collect this information from you directly through the online contact forms on our website, on email, in person or via other digital platforms including social media.
We use your data for the following purposes: -
To administer and provide information such as legal and business updates and invitations to professional and social events;
To enable us to communicate with you about updates or events;
To respond to questions raised by you;
For conflict checking and other regulatory / record keeping purposes; and
To personalise and/or tailor update communications to you.
Lawful basis for processing your personal data
Our lawful basis for processing data relating to the provision of legal and business updates and invitations to events is consent.
We do not process special categories of personal data for update or marketing purposes other than processing details of dietary requirements provided with your specific consent and/or, where appropriate, to protect your vital interests in connection with a professional or social event.
You have the right to withdraw or vary this consent and unsubscribe from communications from us - see "Consent and Withdrawal of Consent" below.
Is my information shared with other organisations?
We will not use your data for purposes that are not clear when you provide your details and will not disclose your personal data outside of e3 except in limited circumstances which are outlined below.
We may share your data with third parties (a) if we are under a legal or regulatory duty to do so, (b) if it is necessary to do so to enforce our contractual rights, (c) to lawfully assist the police or security services with the prevention and detection of crime or terrorist activity, (d) where such disclosure is necessary to protect the safety or security of any persons and/or, (e) otherwise as permitted under applicable law.
Will my data be transferred outside the EEA?
e3 does not transfer data outside of the EEA for legal or business updates or marketing purposes.
How long is my data retained?
e3 will retain your data for as long as is reasonably necessary for the required updates and invites to be provided to you or until you withdraw your consent (whichever is earlier). Your data will not be retained indefinitely or for reasons incompatible with relevant data protection legislation, including the General Data Protection Regulation.
What control do I have over my personal data?
As a data subject you have the following rights:
The right to be informed – the right to receive the information provided within this privacy notice and appropriate updates.
The right of access – the right to access the personal data which is being processed, confirmation of that processing and supplemental information to verify that it is being lawfully processed.
The right to rectification – the right to request rectification if you believe that your personal data is inaccurate or incomplete.
The right to erasure – the right to request deletion of your personal data if you believe that there is no compelling reason for continued processing.
The right to restrict processing – the right to request processing of your personal data is blocked or suppressed whilst the data continues to be stored.
The right to data portability – the right to request transfer of data to another organisation in a commonly used machine readable format.
The right to object – the right to object to processing based on our legitimate interests, direct marketing, or for research and statistics.
Rights re Automated Decision Making & Profiling – the right not to be subject to decision based on automated processing or ‘profiling’ without human intervention or appropriate safeguards.
Please email firstname.lastname@example.org with the subject heading: "GDPR rights" if you would like further information on any of your rights, the circumstances in which they apply and/or the mechanism to use if you wish to exercise your rights.
Is my personal data used in any form of automated decision making?
At present, we do not use automated decision making nor do we intend to do so. (If we do start to use automated decision making then will provide you with details of the logic used, the significance and the possible consequences.)
Consent & Withdrawal of Consent
As set out above, we will only process your personal data for the purpose of providing business and legal updates, requests for references and sending you invitations to events which we believe may be of interest to you if you have provided your consent.
You understand that you can vary or withdraw consent to any combination of these elements above at any time by emailing: email@example.com. with the subject heading "Consent Change" and specifying the variation or withdrawal you require.
Such variations or withdrawals will not affect the lawfulness of any use of your information that we make before you vary or withdraw your consent.
What do I do if I am unhappy with the processing of my personal data?
If you have any concerns or you are dissatisfied with the handling of your personal data you should submit such concerns to (firstname.lastname@example.org) with the subject heading: "Personal Data Concern".
You also have the right to lodge a complaint to a relevant supervisory authority. (In the UK the supervisory authority is the Information Commissioner’s Office.)
Information Commissioner’s Office
You can also contact the Information Commissioner’s Office by visiting their website https://www.ico.org.uk
Peace of Mind
We take data protection seriously, and we take the protection of your personal data seriously. The safeguards we have in place include operating a reputable hosted practice management system (backed by Tier 3 data centre and ISO 27001 accredited security) and utilising encrypted laptops and robust anti-virus software.
We only collect and use your data for lawful, appropriate purposes. We do not pass your information to third parties so that they can market goods or services to you.
Changes to this Privacy Notice
We aim to meet high standards and so our policies and processes are subject to review. From time to time we may change this Privacy Notice and will inform you, usually in writing or by publishing updated content to our website, https://www.e3employmentlaw.co.uk.