If you contact e3 by any means (including by letter, email, telephone, fax etc) and identify yourself then e3 employment law LLP ("e3") holds information relating to you then we are likely to process that correspondence and any continuation of that initial correspondence. This means that e3 processes some personal data relating to you.
Many individuals would have a reasonable understanding of the different ways in which they could expect their personal data within their own correspopndence to be processed. This might include:
data relating to the fact of the communication; and/or
data within the chain of correspondence.
Equally, however, some individuals may not. Please forgive us if you fully appreciate all of the following information but we prefer to err on the side of transparency for those who might not.
We intend that this notice will provide transparency and enable every individual to understand how and why their personal data is used by us. e3 wants you to have maximum visibility, understanding and control over our processing of your personal data relating to your correspondence.
This document is intended to be written concisely and in plain language so that the information is readily accessible and understandable. (If you do not understand any element or have any queries please contact firstname.lastname@example.org).
What is my ‘personal data’?
Your personal data is simply any information that relates to you as an identifiable individual. This might range from your name to the content of correspondence sent or received by you.
What is data processing?
Data processing means any action which is performed on data including collection, recording, storing, viewing, altering, transmitting, and disclosing right through to erasure or destruction of the data.
Who is responsible for my personal data?
The Data Controller responsible for your personal data is e3 employment law LLP. You can contact the Data Controller at Delphian House, Riverside, New Bailey Street, Manchester M3 5FS and/or by emailing email@example.com..
We are not required to have a Data Protection Officer by the relevant data protection legislation. Instead all of the e3 Partners share responsibility for data protection issues. (If a Data Protection Officer is appointed at some point in the future then you will be notified of the appropriate contact details.)
Please ensure that you read this Privacy Notice carefully and any other similar notice we may provide to you from time to time when we collect or process personal information about you.
What information is collected?
All personal information that we collect about you will be recorded, used and protected by us in accordance with applicable data protection legislation, including the General Data Protection Regulation and this Privacy Notice.
How is the information collected?
The information is collected by the process of correspondence.
Lawful basis for processing your personal data
Our lawful basis for processing data relating to the provision of legal and business updates and invitations to events is legitmate interests. Our legitimate interest may include:
Conducting our business as a law firm specialising in employment law
Administering the organisation
Reporting to regulatory bodies, government bodies and departments
Providing an efficient and effective service
Is my information shared with other organisations?
We will not disclose your personal data outside of e3 except in limited circumstances which are outlined below.
We may share your data with third parties (a) if we are under a legal or regulatory duty to do so, (b) if it is necessary to do so to enforce our contractual rights, (c) to lawfully assist the police or security services with the prevention and detection of crime or terrorist activity, (d) where such disclosure is necessary to protect the safety or security of any persons and/or, (e) otherwise as permitted under applicable law.
Will my data be transferred outside the EEA?
e3 does not transfer data outside of the EEA for legal or business updates or marketing purposes.
How long is my data retained?
e3 will normally retain your data for 6 years or until it ceases to appear relevant (if earlier). Your data will not be retained indefinitely or for reasons incompatible with relevant data protection legislation, including the General Data Protection Regulation.
What control do I have over my personal data?
As a data subject you have the following rights:
The right to be informed – the right to receive the information provided within this privacy notice and appropriate updates.
The right of access – the right to access the personal data which is being processed, confirmation of that processing and supplemental information to verify that it is being lawfully processed.
The right to rectification – the right to request rectification if you believe that your personal data is inaccurate or incomplete.
The right to erasure – the right to request deletion of your personal data if you believe that there is no compelling reason for continued processing.
The right to restrict processing – the right to request processing of your personal data is blocked or suppressed whilst the data continues to be stored.
The right to data portability – the right to request transfer of data to another organisation in a commonly used machine readable format.
The right to object – the right to object to processing based on our legitimate interests, direct marketing, or for research and statistics.
Rights re Automated Decision Making & Profiling – the right not to be subject to decision based on automated processing or ‘profiling’ without human intervention or appropriate safeguards.
Please email firstname.lastname@example.org with the subject heading: "GDPR rights" if you would like further information on any of your rights, the circumstances in which they apply and/or the mechanism to use if you wish to exercise your rights.
Is my personal data used in any form of automated decision making?
At present, we do not use automated decision making and nor do we intend to do so. (If we do start to use automated decision making then will provide you with details of the logic used, the significance and the possible consequences.)
What do I do if I am unhappy with the processing of my personal data?
If you have any concerns or you are dissatisfied with the handling of your personal data you should submit such concerns to (email@example.com) with the subject heading: "Personal Data Concern".
You also have the right to lodge a complaint to a relevant supervisory authority. (In the UK the supervisory authority is the Information Commissioner’s Office.)
Information Commissioner’s Office
You can also contact the Information Commissioner’s Office by visiting their website https://www.ico.org.uk
Peace of Mind
We take data protection seriously, and we take the protection of your personal data seriously. The safeguards we have in place include operating a reputable hosted practice management system (backed by Tier 3 data centre and ISO 27001 accredited security), utilising encrypted laptops and robust anti-virus software.
We only collect and use your data for lawful, appropriate purposes. We do not pass your information to third parties so that they can market goods or services to you.
Changes to this Privacy Notice
We aim to meet high standards and so our policies and processes are subject to review. From time to time we may change this Privacy Notice and will inform you, usually in writing or by publishing updated content to our website, https://www.e3employmentlaw.co.uk.