As you will undoubtedly already be aware, the General Data Protection Regulation (GDPR) will come into effect on 25th May 2018. This EU regulation which the UK Government has confirmed will be implemented, introduces new requirements for how organizations process personal data. DNC UK Ltd (DNC) is committed to protecting the privacy and security of your personal information.
This privacy notice describes how we collect and use personal information about you before, during and after your working relationship with us, in accordance with the General Data Protection Regulation (GDPR).
Data covered by this legislation includes the personal identifying information regarding DNC’s customers and suppliers, and the employee data they choose to share with us.
If you are receiving emails you have chosen to share a full name and corresponding email address with DNC, which is held in our Customer Relationship Management (CRM) service as described below.
What data does DNC hold?
Customers
If you are a DNC customer, you will have provided us with the following:
• The name(s) and contact details of person(s) involved in the purchase and/or use of our products and solutions
• Billing and Delivery addresses of orders placed
We also retain:
• The name(s) and contact details given of any additional person(s) involved in the use of our products and solutions. This includes any email and SMS contact information provided for the purposes of message/alert forwarding.
• Purchase history for the purposes of customer service. This includes the serial numbers of tracking devices for the calculation of warranty periods, and the purchase dates and periods of Support Service.
No personally identifying information beyond the initial scope of providing products or services is asked for nor retained by DNC.
Where trackers/services are hosted by DNC no GPS-related data is incorporated with or stored alongside any personally identifying information.
Suppliers
If you are a supplier to DNC you will have provided us with the following:
• The name(s) and contact details of person(s) involved with facilitating orders placed by DNC, and;
• Financial details required by DNC in order to make payment for orders
Other Non-Customer Contacts
If you choose to provide DNC with identifying information such as your name, email address and/or phone number in response to direct marketing activities including trade shows, DNC websites and meetings in-person; the details provided to us are used exclusively for the transmission of relevant/requested materials directly following the show, meeting or similar.
The details given are retained for no longer than their immediate use (i.e. making contact for the purposes of discussing relevant products and solutions). The details are then discarded; not used for subsequent marketing activities.
How is my data stored and used by DNC?
Personal data as defined above is used exclusively by DNC to facilitate and supplement existing business activities. This data is not shared with any third parties for the purposes of marketing. Information directly relating to the physical delivery of goods to customers’ specified locations is shared with our chosen delivery partners, who themselves are subject to GDPR legislation as data processors.
All data is held securely in an encrypted format. Data pertaining to customer accounts and purchases is stored using DNC’s chosen Customer Relationship Management (CRM) service. This data is accessible only by select DNC personnel and, as mentioned previously, is limited to information directly related to delivering products and services. No access is available externally, including by those about whom it relates.
This data is updated when subsequent orders are made by customers, or when DNC order from our suppliers. Updated information (primary contacts, email and physical addresses, and phone numbers) replaces previously held information. No record of the previous details are held within our CRM, with the exception of any documentation generated prior to the change.
The personally identifying data described here is held indefinitely for the purposes of delivering our products and services until such time as customer/supplier relationship is terminated, or upon request by the customer/supplier. We will share your personal information with third parties only where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so.
DNC Website
DNC’s websites employ username and password protection on some content in order to restrict access to product information.
If you have registered as a user on our website, your registration will have included a contact email address. This information is not used or shared for any purpose beyond automated messaging from our website. All details are held securely in an encrypted format within the website hosting environment.
Right to be Forgotten (Right to Erasure)
As mentioned above, the personal data held by DNC is done so indefinitely until such time as relationship between ourselves and our customer/supplier is terminated, or the customer/supplier updates their information or requests for it to be deleted.
If you would prefer DNC to delete any specific data regarding yourself or your company, please submit your request to: gdpr @d nc-uk.com (remove spaces after gdpr and @)
If the details in question are already outside of periods in which we are legally obligated to maintain records, are not the subject of legal investigation, etc.; this information will be erased in a timely manner.
Data Protection Officer
We have appointed a data privacy manager to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact our privacy manager at: gdpr @ dnc-uk.com (remove spaces after gdpr and @)
Changes to This Privacy Notice
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
