Company: CBF Service Centre Limited Author: Sheryl Basey-Fisher Date Created: 23/05/2018
Date Revised:
Version Number: V1.0
Location: Main Office/online
Change/Verification Frequency: Annual or upon any material change
Below are our policies to comply with GDPR legislation. Our Data Processing Officer is Sheryl Basey-Fisher. All queries and information requests should be forwarded to him/her in writing.
Information we process
As an automotive workshop, our primary use for holding and processing Individual data is for contractual and legislative purposes.
We do not share data with any third parties outside of the provision of contractual or legislative services.
We may from time to time communicate with individuals to notify them when the Government mandated MOT inspection is due or to inform them of Legitimate Interest products or services.
Privacy, Consent and Individual Rights
Marketing. Data may be used to communicate with customers about MOT renewal dates, service reminders and promotional information relevant to the services we offer. These communications are included as they are classified as being of Legitimate Interest to the recipient. We will cease all communications to customers if the customer account is dormant for more than 3 years. Should the recipient wish to be excluded from these communications, they must write to us to confirm their request and we will exclude them for future communications within 40 days of receipt of the request.
In terms of subject access to view the data we hold
Subject Access. In terms of providing copies of the data we hold, we will upon receipt of a written request provide hard copies of any invoices, quotations and work orders within 40 days of receiving the request.
Individual Data Rights. In terms of providing the right to erase data, data portability and the right to object we are obliged to follow the request as determined by the nature of the data and its processing as defined in the table below.
Individual notification of Data Rights. All Quotations, estimates, invoices and contract related communications will not be subject to the right to erasure, portability or the right to object and no option to opt-out will be provided.
MOT reminders and marketing campaigns will include be subject to the Legitimate Interest test and an option to opt-out will be provided.
Web sites, promotional emails and promotional SMS messages will carry the statement “To opt-out of marketing communications or to view our GDPR policies, please write to us at “cbfservicecentre@hotmail.co.uk” and we will process your request.”
Right to erasure
Right to portability
Right to object
Consent
X but right to withdray consent
Contract
X
Legal obligation
X
X
X
Vital interests
X
X
Public task
X
X
Legitimate interests
X
All requests must be submitted in writing and will be actioned within 40 working days of receiving the request. The right to portability only applies to data that is processed electronically.