Surrey Development Forum (instructed by Savills and Cratus) is committed to ensuring that your privacy is protected and our use of your personal information is governed by this Privacy Notice.
Our use of your personal data will be governed by this Privacy Notice.
Surrey Development Forum is a controller for the personal information that it collects and uses about you. We will treat your personal information as confidential and in accordance with applicable data protection legislation and your personal information will only be shared with others in accordance with this Privacy Notice.
We will collect your full name and contact details (such as phone number, email address and postal address) from you whenever you engage with us.
Under data protection legislation we are only permitted to use your personal information if we have a legal basis for doing so. We rely on the following legal bases to use your information;
- For employment-related purposes
- Where we need information to perform the contract we have entered into with you
- Where we need to comply with a legal obligation
- Where the processing is necessary for us to carry out activities for which it is in Savills legitimate interests (or those of a third party) to do so and provided that your interests and fundamental rights do not override those interests.
The security of information is very important to us and we have measures in place which are designed to prevent unauthorised access to your personal information including but not limited to:
- Our client files are stored on our secure client management systems. Access is restricted on our client systems to those within the business who are required to have access to your information for legitimate business purposes.
- Hard copy documentation is stored in locked cabinets.
All data is hosted in datacentres which have systems and protections in place to protect against both unauthorised access, and other external factors that could cause damage to, your personal data. There are strict access requirements in place and access is restricted to those absolutely necessary.
We ensure access to personal information is restricted. Training is provided to any of those staff who need access to personal information.
The period for which we will keep your personal information will depend on the type of service you have requested from us. The retention period may be longer than the period for which we are providing services to you where we have statutory or regulatory obligations to retain personal information for a longer period, or where we may need to retain the information in case of a legal claim.
You have a number of rights in relation to your personal information, including the right to:
- Be informed about how we use your personal information
- Obtain access to your personal information that we hold
- Request that your personal information is corrected if you believe it is incorrect, incomplete or inaccurate
- Request that we erase your personal information in the following circumstances:
- If Savills is continuing to process personal information beyond the period when it is necessary to do so for the purpose for which it was originally collected
- If Savills is relying on consent as the legal basis for processing and you withdraw consent
- If Savills is relying on legitimate interests as the legal basis for processing and you object to this processing and there is no overriding compelling ground which enables us continue with the processing
- If the personal information has been processed unlawfully (i.e. in breach of the requirements of the data protection legislation)
- If it is necessary to delete the personal information to comply with a legal obligation
- Ask us to restrict our data processing activities where you consider that:
- personal information is inaccurate
- our processing of your information is unlawful
- where we no longer need the personal information but you require us to keep it to enable you to establish, exercise or defend a legal claim
- where you have raised an objection to our use of your personal information
- Request a copy of certain personal information that you have provided to us in a commonly used electronic format. This right relates to personal information that you have provided to us that we need in order to perform our agreement with you and personal information where we are relying on consent to process your personal information
- Object to our processing of your personal information where we are relying on legitimate interests or exercise of a public interest task to make the processing lawful. If you raise an objection we will carry out an assessment to determine whether we have an overriding legitimate ground which entitles us to continue to process your personal information; and
- Not be subject to wholly automated decisions which produce legal effects or which could have a similarly significant effect on you.
If you have any complaints about the way we use your personal information please contact theCustomer Relations Officer at [email protected] who will try to resolve the issue. If we cannot resolve any issue, you have the right to complain to the data protection authority in your country (the Information Commissioner in the UK). If you need more information about how to contact your local data protection authority please let us know by contacting [email protected]
