3DEC
Privacy Notice
This privacy notice is provided to demonstrate our transparency by informing you about how and why your personal data is used and to ensure that you are aware of your rights under data protection legislation.
The Company
We are 3DEC Ltd and we are the Data Controller. Our registered address is 52 High Street, Pinner, Middlesex, HA5 5PW. We can also be contacted at PMO@3dec.co.uk and by telephone +44 (0) 203 126 4990.
The purpose for processing your data and our basis for doing so.
3DEC is a global ICT Design and Creative consultancy. We process personal data for the purpose of engaging with and managing our relationship with our clients, for communication purposes and for developing new client relationships (marketing).
As a client of ours, we will process your name, email address, business postal address and contact numbers. We will also process these details if you are introduced into the company as a prospective client or contact us through our webform. The lawful basis that we process this personal data is Article 6.1.f UK GDPR – ‘legitimate interest’. The legitimate interest we pursue is to continue to support our existing clients and to develop new relationships.
If you fail to provide your data for processing, then it will not be able to provide our services to you.
Recipients of your data
As a general principle, we will not transfer your personal data to other recipients without your permission. There are some exceptions to this:
- It is possible, that we might be obliged to disclose personal information in response to a court order or other lawful obligation.
- We may share your data as part of a sale, transfer, or merge part of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them.
- We use external partners and contractors who provide services to us to whom we may need to share personal information.
Data processed by third parties on our behalf.
We use the services of other organisations in the processing of your data. We use cloud-based email and document storage, web hosts and video conference platforms. Our website processes limited personal data such as through our contact form. Our external IT service provider has access to data for administrative purposes.
Transferring your data outside of the UK
Personal data is processed both in the UK and in the EU for the purpose email and document storage. Transfers to the EU are controlled by the UK / EU adequacy decision.
Retention periods
We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation or other legitimate purpose. We will retain the personal data we process for a period of 7 years.
Automated decision making
We do not undertake any automated decision making.
Your rights
The UK GDPR provides you with several rights in relation to the data of your we process. The rights relevant to our activities are:
- You have the right to get access to and copies of your personal data.
- You can ask us to rectify any inaccurate information we may be holding.
- You can request we restrict our processing of your data.
- You can ask us to erase your personal data if it is no longer required for the purpose we collected it or have no legal obligation to retain it.
- You have the right to object to processing we undertake under a legitimate interest basis.
- You have the right to data portability for personal data processed by consent and contract.
If you want to exercise any of these rights, please contact us using the above contact details.
You also have the right to lodge a complaint about our processing with a supervisory authority — the UK’s Information Commissioner’s Office.
The Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Helpline number: 0303 123 1113