GENERAL PRIVACY STATEMENT

Effective: 19th June 2018

OUR APPROACH TO PRIVACY

Carbon Action collects Personal Data in order to provide our professional consultancy & training solutions.

WHOSE PERSONAL DATA DO WE HAVE?

This Privacy Statement applies to Personal Data we process in relation to the following data subjects:

• Business Clients of our consultancy & training services;
• Individual attendees of our training courses and
• Visitors and users of our website at https://carbonaction.co.uk/.

This Privacy Statement is not applicable to employees or sub-contractors of Carbon Action.

SHARING OF PERSONAL DATA

We will need to share your information in order to provide services to you. We will always ensure that we will comply with the law when we transfer your Personal Data. We will also ensure that any processor or sub-processor takes appropriate technical and organisational measures when processing Personal Data on our behalf.

YOUR RIGHTS

You have various rights relating to how your Personal Data is used, including the right:

• to ask for access to the information we hold on you;
• to change information that you think is inaccurate;
• to delete information (your right to be forgotten);
• to ask us to limit the purpose(s) for which we use your Personal Data;
• to have your Personal Data moved to another provider (data portability); and
• to make a complaint.

SECURITY MEASURES

We will take all steps reasonably necessary to ensure that all Personal Data is treated securely in accordance with this Privacy Statement and the relevant law.

In particular, we have put in place appropriate technical and organisational procedures to safeguard and secure the information we manage and collect;

Once we have received your information, we will use strict procedures and security features for the purpose of preventing unauthorised access and ensuring that only those who need to have access to your Personal Data can access it.

We also use secure connections to protect Personal Data during its transmission.

If you think that there has been any loss or unauthorised access to Personal Data of any individual, please let us know immediately.

CROSS BORDER DATA TRANSFERS

We use and share Personal Data both inside and outside the EU. We ensure that any transfer of data outside the EU is undertaken using legally compliant transfer mechanisms and in accordance with the GDPR.

When we transfer Personal Data outside the EU, we generally rely on the Standard Contractual Clauses under Article 46(2) of the GDPR adopted by the EU Commission. However, we may also rely on some other legally compliant transfer mechanisms.

DATA RETENTION

Carbon Action will retain personal data for (i) as long as it is needed for the purpose of which it was collected, or (ii) the date the individual asks us to delete their Personal Data or (iii) in the case of marketing, the date the candidate unsubscribes from marketing communications, whichever is earlier.

AMENDMENTS TO THIS PRIVACY STATEMENT

We will update the date on this Privacy Statement when we make changes to it

We will post any changes on the website and when doing so will change the updated date at the top of this Privacy Statement.

HOW TO CONTACT US

You can email us at: info@carbonaction.co.uk

HOW WE COLLECT PERSONAL DATA

We collect personal data in relation to our services from a number of sources. This may be directly from clients and individuals availing of our services, or indirectly from third parties whom we have contracted to assist with services on our behalf. This information may be collected from various sources such as:

• website (course bookings, general enquiries, all interactions, etc.)
• clients availing of services (training, consultancy)
• individuals booking on to training courses

HOW WE PROCESS PERSONAL DATA

We process all personal data lawfully under the GDPR. The main grounds for processing of data is consent, contract, legal obligation or legitimate interests.

HOW WE USE PERSONAL DATA

We only use an individual’s personal data for purposes that an individual would expect. We require personal data to carry out our services, and for activities relating to our services.