PRIVACY POLICY
Identity and Contact Details
Gritstone Structural Design is a specialist engineering design consultancy based across the South Yorkshire and Surrounding Areas and is the data controller for the purpose of the General Data Protection Regulation 2016/679 and country specific data protection laws.
The Head office is based at The Workshop, 467 Redmires Road, Lodge Moor Sheffield. S10 4LF
Tel: 0333 3554920
Data Protection Representative Contact Details
The Data Protection Representative at Gritstone Structural Design can be contacted by sending an email to: oli@gritstonedesign.co.uk
Definitions
‘Personal Data’ shall mean any information relating to an identified or identifiable natural person (Data Subject); an identifiable person who can be identified, directly or indirectly, in particular by reference to an identification number or to other
factors or reference points.
What information Gritstone Structural Design Collects
Gritstone Structural Design collect Personal Data from:
Candidates that wish to work for Gritstone Structural Design
Employees
Prospective Customers
Customers
Suppliers
Contractors
We may also ask you to complete surveys that we use for research or customer service purposes, although you do not have to respond to them.
Purpose of Processing
Gritstone Structural Design is a specialist engineering consultancy based across the North of England. Personal Data provided may be stored on Gritstone Structural Design databases in order to perform services more efficiently, provide structural
engineering services and maintain their records.
If a customer has requested a quote for services from Gritstone Structural Design, details of the customer will be held on file to process into a confirmed booking. If the customer decides not to proceed with the booking then the information will be held
on Gritstone Structural Design database for 12 months. Then it will be removed if no further contact has been made.
If a customer proceeds with a booking then their personal data will be held on our database, required by law for legal purposes in the event of any legal dispute arising from the works completed.
Gritstone Structural Design will not collect any personal data that is unnecessary or irrelevant.
Legitimate Interests
Gritstone Structural Design records customers data, which includes customer contact details, such as address, phone numbers and email addresses to facilitate the delivery of services.
For reference and information purposes, correspondence received from telephone conversations or emails are stored in our systems, in case it is needed to refer back to at a subsequent date.
Cookies
Gritstone Structural Design may collect information about customers general internet usage by using a cookie file which is stored on the hard drive of your computer.
Cookies contain information that is transferred to your computer’s hard drive. They help us to improve our site and to deliver a better more personalised service.
There are different types of cookies. The only ones used by Gritstone Structural Design are:
Performance cookies: these collect information about how visitors use our website, for example which pages are visited most. These cookies do not collect information that identifies visitors to our website.
You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of our site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to the Gritstone Structural Design website (www.gritstonedesign.co.uk) (‘Site’).
Our Customers
The type of personal information that we typically collect and hold about clients is information that is reasonably necessary to help us manage the presentation and delivery of our services. This may include contact information, including names,
titles, addresses, email addresses and telephone numbers.
Who Gritstone Structural Design share your personal data with Gritstone Structural Design may also share your personal data with third party service providers for the provision of booking management software, report production software and IT support services.
Gritstone Structural Design take reasonable steps to ensure that the terms of service with our third party service providers recognise that we are bound by obligations to protect the privacy of your personal information.
Any personal data provided to Gritstone Structural Design may be stored on the database and/or systems and transferred between any of the locations in which we operate will be protected when transferred.
Retention
The personal data that Gritstone Structural Design collect is only retained for as long as needed. The criteria we use to determine the period can vary for each type of data, which depends on statutory or contractual obligations. Following expiry of this
designated period, your personal data will be securely deleted.
The table below, lists the different types of data we require from our customers, the specific purpose or reason for collecting the data and the lawful basis, which has been carefully identified to comply with the regulation.
Personal data type
Purpose of processing your personal data
Legal Basis
Name
To create Survey report
Performance of contract
Billing address
For billing purposes
Performance of contract
Survey property address
To carry out required services
Performance of contract
To maintain communication with customer
Performance of contract
Phone number
To maintain communication with customer
Performance of contract
Data Subject Rights
Gritstone Structural Design are committed to facilitating your rights, where you are fully entitled to the following:
Obtain or gain access to the personal data we hold about customers on our
recordsThe rectification of your personal data which you believe in inaccurate
The restriction of processing your personal data
Object to processing of personal data, where processing is based on legitimate interests (unless Gritstone Structural Design have compelling legitimate grounds for the processing) public interests and direct marketing purposes
Have your data erased from our records
Have your data ported in electronic, machine readable format from Gritstone Structural Design to yourself or another organisation
Please contact our Data Protection Representative for assistance and we shall take action on a request without undue delay and in any event within one month of receipt. That period may be extended to two further months where necessary,
taking into account the complexity and number of the requests.
The right to lodge a complaint
In the event that you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can raise a complaint to the Information. Commissioner’s Office (ICO) in addition to maintaining the right to complain to a supervisory authority.
Further processing
Gritstone Structural Design will always endeavor to explain what personal data we require from you and the reasons why it is required. Should it be determined at a later date that we need to process your data for an additional purpose which you
are not aware of at point of collection, we will ensure you are fully informed of our intentions and your rights as explained above will be applicable.