CDS privacy notice
This privacy notice will provide information about how we handle your personal data as a client of CDS. If you have any queries, please contact compliance@bgbs.co.uk
Contacts
Your personal data is processed by the following controller:
| Controller | Address |
| Corporate Document Services Ltd | Riverside House, 7 Canal Wharf, Leeds, LS11 5AS |
You can write to us at the above address or you can contact the compliance team by email on: compliance@bgbs.co.uk or by telephone on 0113 3994000.
What personal data we use and why
| What | Examples | Purpose | Lawful Basis | Legitimate Interest (if applicable |
| Identifiers | First name, Last Name |
To allow us to identify you and refer to you by the correct name |
The processing is necessary for a contract The processing is necessary for your legitimate interests or the legitimate interests |
To allow us to contact you regarding our professional services from a B2B perspective |
| Current work/employment details |
Job role, office location, email communication, Work email address and contact number |
To be able to contact you in relation to the work we carry out for you. To allow us to contact you with any new marketing | The processing is necessary for a contract The processing is necessary for your legitimate interests or the legitimate interests of a third party |
To allow us to contact you regarding our professional services from a B2B perspective |
With whom we share your personal data
| Who | What | Lawful Basis | Legitimate Interest |
| Bailie Group Business Services | Identifiers, Current work/employment details | The processing is necessary for a contract | |
| IT Service Providers | Identifiers, Current work/employment details | The processing is necessary for a contract | |
| CDS Support Ltd | Identifiers, Current work/employment details | Legitimate interest | To pass details within our Group on where we believe they may be able to provide a service that you have indicated you are interested in. |
| Newspress Ltd | Identifiers, Current work/employment details | Legitimate interest | To pass details within our Group on where we believe they may be able to provide a service that you have indicated you are interested in. |
How long we store your personal data
We store your personal data for two years from the date of our last interaction with you, after which we will delete your details.
Personal data which relates to records such as contracts, order information or accident records (where you visit any of our premises) may be kept longer and these details can be located in our Data Retention Policy which can be provided upon request.
If you do not provide us your personal data
If you do not provide us your personal data, we will not be able to uphold our responsibilities of the contract.
Your rights
Your right of access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
Your right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing
You have the right to object to processing if we are able to process your information because the process forms part of our public tasks, or is in our legitimate interests.
Your right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the 1 / 2 information you give us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the
processing is automated.
You are not required to pay any charge for exercising your rights. We have one month to respond to you. Please contact us at compliance@bgbs.co.uk to exercise any rights.
Withdrawal of consent
Where we use consent as our lawful basis, you are provided the right to withdraw that consent as easily as
you provide it. Where this is the case we will advise how to withdraw that consent upon collection.
Automated decision-making
There is currently no automated decision making taking place.
International transfer of personal data
Where we believe there will be any international transfers to countries outside of the UK or EEA we will
ensure that one or more of the following safeguards are in place including:
- Adequacy Decision
- Standard contractual clauses with a Transfer Impact Assessment
- International Data Transfer Agreement with a Transfer Impact Assessment
- Binding Corporate Rules.
Or we will use one of the following exceptions to process the personal data lawfully:
- We collect explicit consent
- We have a contractual requirement to do so
- To manage any legal claims
- It is in the public interest
- To protect the vital interest of an individual
- It is a one off transfer and we have compelling legitimate interest to do so.
How to complain
We work to high standards when it comes to processing your personal information. If you have any concerns with the way we are processing your personal data, we encourage you to contact us on compliance@bgbs.co.uk and we will respond.
If you are not satisfied when it comes to our response or still have concerns with the way we are processing your personal data, you have the right to complain to the Information Commissioner's Office (ICO). Please visit the ICO's website for further details.