1 – Overview
We hold the relationship with our clients at the utmost importance, it is for this reason we have laid out all of your privacy rights within this document.
These rights are inclusive of the GDPR changes of May 2018
2 – How We Acquire Your Personal Data
It is most likely that if you are reading this document that we have acquired your personal data via the Contact Us form on our website.
If that is the case, the only Personal Data we will have on you or your company will be what you provided to us at the initial point of contact. As the projects continue it may become necessary to acquire more Personal Data from you (such as Bank Details for payment, or Premise Address for meetings) but this data will only come from outside of Astor and we will never Data Mine you or your company
We do also however occasionally investigate a business we would like to work with and collect publicly available data which we add to our database. This is data we acquire either directly through your website, through Google, or through any other publicly available source.
We never buy data from third parties.
If you believe we have acquired your data through this method and would like to have it removed, there is a full explanation in Section 5 as to how to do this.
3 – How We Hold Your Personal Data
Whether we have acquired your Personal Data through External Aquisition or Internal Acquisition, we organise it all into our Database.
This Database is locked securely away on our premises, and contains only the information you provide us or that is publicly available. Our premises are alarmed, monitored by CCTV and require two keys and three codes to access.
If your Personal Data is ever to be taken off site it will be held on an encrypted hard drive that will be under watch at all times.
Our personal cloud server also requires a code to access and is additionally encrypted.
4 – How We Use Your Personal Data
We hold onto your data primarily to ease the contact process between us.
In short this means if you have filled out the enquiry form in regards to our services we can e-mail over examples of our work that are relevant to the project, and get in touch via telephone.
Once the contract is over we hold these details on our Database for up to four years. This is so that if you decide you would like to start another project in the future we can begin straight away. It is however completely within your rights to have this information removed upon request, this is further explained in Section 5.
We never sell your Personal Data to any third parties, Processors or any company/organisation outside of Astor Productions partners.
5 – Your Rights
Right to be Informed (Articles 13 & 14)
This document covers your right to be informed, and is a completely transparent record of how and why we use your Personal Data. If you believe we have not done this to a satisfactory standard it is also completely within your rights to lodge a complaint with a supervisory authority.
Right of Access (Article 15)
Individuals have the right to access their personal data and supplementary information upon request. This allows individuals to be aware of and verify the lawfulness of the processing. This information is available free of charge.
Right to Rectification (Article 16)
If you believe that the Personal Data we hold on you is incorrect or in need of rectification, it is within your rights to request the changes to be made, again, free of charge.
Right to Erasure (Article 17)
Also known as ‘the Right to be Forgotten’, the principle underpinning this right is to enable an individual to request the deletion or removal of Personal Data where there is no compelling reason for its continued processing. In short, if you believe we have no good reason to hold onto your data, it is your right to request for the deletion of all records we hold on you and/or your company. Records would then be deleted from all of our data drives, cloud servers and Partner companies.
Right to Restrict Processing (Article 18 & 19)
We routinely check and update the Personal Data we hold on customers, as to verify it’s accuracy. The Right to Restrict Processing means that upon request we would no longer interact with your data, whether that’s updating it, sharing with our Partner companies or using it to complete a project with you. This is not the same, however, as the Right to Erasure as it would still be held on our Database.
Right to Data Portability (Article 20)
This right ensures that, upon request, we can provide you with all the Personal Data we hold on you in an easily readable format for both people and machines. This service is available free of charge
Right to Object (Article 21)
Your Right to Object is active before any contact is made with Astor. In short, it is entirely within your rights as a company, or as an individual, to object to Astor holding, acquiring or processing information pertaining to your Personal Data. If you wish to object please send an email to email@example.com or call on 01482 291 700
Rights related to automated decision making including profiling (Article 22)
These rights pertain to your knowledge and recognition that the rights listed above exist, and are active under Astor Productions. We carry out processing under Article 22(1) because we have the individual’s explicit consent recorded. We can show when and how we obtained consent. We tell individuals how they can withdraw consent and have a simple way for them to do this.
6 – Summary
This document has provided a brief, transparent look into how and why we hold your Personal Data.
If you have any further questions or complaints, or would like to know more about your rights as a company and as an Individual, then please contact us via e-mail at firstname.lastname@example.org or call on 01482 291 700