Your privacy is important to us. When we process your personal data we comply with the UK GDPR and the Data Protection Act 2018, together with any other applicable data protection and privacy legislation.
Your personal data includes all the information we hold that identifies you or is about you. More information about the types of personal data we process about you is set out below.
Everything we do with your personal data counts as processing it, including collecting, storing, amending, transferring and deleting it.
This privacy policy provides information about the personal data we process about you, why we process it and how we process it. It applies to customers and suppliers as well as candidates contacting us in relation to job vacancies.
Carnaby Caravans Limited (with registered address at Lancaster Road, Carnaby Industrial Estate, Carnaby, Bridlington, Yorkshire YO15 3QY and registered company number 01239687) (“Carnaby Caravans”) is the controller of the personal data you provide.
If you wish to exercise any of your rights detailed below, please contact dataprotection@carnabycaravans.com.
We process personal data about you when you submit an enquiry to us, ask us to send you marketing or contact us for any other reason. If you submit a request via our website, we ask you to provide your name, the details of the company for which you work (if applicable), your address, email address and a contact telephone number.
We will also process any additional personal data you provide as part of your message to or communications with us.
As a general rule, we do not sell products directly to consumers (instead, we would put you in touch with one of our retailers) so we do not process any financial or payment information about you. In the rare event that we sell products to you as a consumer, we will only process such personal data that is necessary to fulfil our contract with you.
If you are a contact at one of our suppliers we will process limited personal data about you, including your name, details of the company for which you work, your business email address and telephone number.
We may also process your personal data if you are one of our business contacts, in which case it will usually consist of your name, email address and contact number as well as information about the organisation at which you work.
Personal data that we are likely to process about you includes:
We process your information in order to respond to your enquiry and, if you have requested, to send you information about our products.
Where you have submitted an enquiry or otherwise contacted us for information, we process your personal data on the grounds of our legitimate interests in providing you with the information you have requested. If you ask us to send you marketing materials, we process your information on the grounds of your consent.
In the rare event that we sell products to you as a consumer, we will process your information to the extent necessary to fulfil our contract with you.
If you are a contact at one of our suppliers or another business contact, we process your personal data on the grounds of our legitimate interests in managing our relationship with you and the organisation for which you work.
We will process your information on the grounds of our legitimate interests to determine whether or not we have a suitable vacancy for you. To the extent we need to process special categories of data about you (for example, to ensure our premises are suitably equipped for you if you attend for an interview), we will do so in accordance with our legal obligations. If you provide special categories of data to us which we have not requested, we will process it on the grounds of your consent because you have voluntarily provided the information to us.
We use different methods to collect data from and about you including through:
You may give us your personal data by filling in forms on our website or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you: submit a query about our products or service whether on our website or by email or phone; request for marketing to be sent to you; give us feedback; or contact us for other business relationship management purposes.
As you interact with our website, we may automatically collect personal data about you. You can find out more information in our cookie policy available here.
We receive personal data about you directly from you when you contact us (or from recruitment agencies who hold your personal data) in respect of a specific vacancy or with a speculative approach.
Your personal data is only transferred to the extent that this is necessary. Recipients of your personal data may include:
In addition to the above, suppliers who provide IT services to us may have access to your personal data when they take control of our IT systems remotely in order to resolve any technical issues we are experiencing or to run any system updates.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
We do not transfer your personal data outside of the EEA.
Your personal data is retained for no more than 3 years. It is retained for this period in case any issues arise or in case you have any queries. Your information will be kept securely at all times. Following the end of the retention period, your files and personal data we hold about you will be permanently deleted or destroyed. If we are required to obtain your consent to send you marketing communications, any information we use for this purpose will be kept until you withdraw your consent, unless we have other legitimate reasons to retain the data.
Your personal data is retained for no more than 6 years. It is retained for this period in case any issues arise or in case you have any queries. Your information will be kept securely at all times. Following the end of the retention period, your files and personal data we hold about you will be permanently deleted or destroyed. If we are required to obtain your consent to send you marketing communications, any information we use for this purpose will be kept until you withdraw your consent, unless we have other legitimate reasons to retain the data.
If you are successful, we will retain your personal data in line with our employee facing privacy policy, a copy of which will be provided to you. If you are unsuccessful, we will retain your application, CV and/or covering letter and any other personal data you provided to us for 12 months from the date we reach our decision in case any other suitable roles arise in which we think you may be interested, or in case you have any questions about our decision. After that date, your personal data will be permanently deleted or destroyed.
You benefit from a number of rights in respect of the personal data we hold about you. We have summarised your rights below, and more information is available from the Information Commissioner’s Office website (https://ico.org.uk/for-organisations/guide-to-the-general-data- protection-regulation-gdpr/individual-rights/). These rights apply for the period in which we process your data. There are certain caveats and exemptions to those rights which mean that in some circumstances you may not be entitled to exercise them, if we believe that is the case upon receipt of a request from you we will let you know.
You have the right to ask us to confirm that we process your personal data, as well as access to and copies of your personal data. You can also ask us to provide a range of information, although most of that information corresponds to the information set out in this fair processing notice.
If you believe personal data we hold about you is inaccurate or incomplete, you can ask us to rectify that information.
In some circumstances, you have the right to ask us to delete personal data we hold about you.
In some circumstances you are entitled to ask us to suppress processing of your personal data. This means we will stop actively processing your personal data but we do not have to delete it.
You have the right to ask us to provide your personal data in a structured, commonly used and machine-readable format so that you are able to transmit the personal data to another data controller.
You are entitled to object to us processing your personal data:
We do not intend to use your personal data to send you direct marketing nor for scientific or historical research and statistics.
Automated decision making means making a decision solely by automated means without any human involvement.
We do not carry out any automated decision making using your personal data.
If you think we have processed your personal data unlawfully or that we have not complied with GDPR, you can report your concerns to the supervisory authority in your jurisdiction. The supervisory authority in the UK is the Information Commissioner’s Office (“ICO”). You can call the ICO on 0303 123 1113 or get in touch via other means, as set out on the ICO website - https://ico.org.uk/concerns/.
If you have any questions or would like more information about the ways in which we process your data, please contact dataprotection@carnabycaravans.com.
