The following is in preparation for GDPR from 25th May 2018:

  • Who is your contact point for data privacy questions? Do you have a Data Protection Officer or an individual responsible?
    • Please contact us directly and speak to Brett, who will answer all your questions.
  • How quickly you will inform us if there if there is a suspected or actual data breach that could have an impact on our personal data? The definition of a data breach is the ‘accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data’
    • We aim to contact you within the same working day of ourselves being made aware that there is or may have been a data breach.
  • Do you store any of our personal data outside the EU, e.g. in Cloud services, or pass it to a third party that is based outside of the EU?
    • All data stored by Control B is on UK-based servers. No data is passed to any third party without strict authorisation by the data controller/owner.
  • Can you provide some examples of the ‘appropriate technical and organisational’ measures you will be using to protect our personal data?
    • Personal data stored by Control B can only be accessed via specific, password-protected channels (e.g. admin screen or control panel software) available only to the data controllers (and their authorised data processors), the server technicians and ourselves.
  • Do you do any processing of our personal data for your own purposes. e.g. combining it into a central database?
    • Control B does not use personal data controlled and processed by its clients and/or customers for any of its own purposes.

 

Updated 23rd May 2018