Follow @floorslip``

Tweet

You are here >

Keywords - About FloorSlip GDPR

 

Services supplied across the UK from Lands End to Dover and Southampton to John O-Groats Contact Northern Regional Office -  07774 323267 - Contact Southern Regional Office   07506 559952. Contact by Phone or E:mail FloorSlip for more info

FloorSlip Limited, Reg No: 07757686 - Version Site-Pendulum-Test-dot-co-uk-new–mar-2019-webplus-X8

1 FLOORSLIP GDPR COMPLIANCE (GENERAL DATA PROTECTION REGULATION)

GDPR was adopted on 14 April 2016, and became enforceable from 25 May 2018. GDPR is a regulation, not a directive, it does not require national governments to pass enabling legislation and is directly binding and applicable.

2 FLOORSLIP COMPLIANCE WITH GDPR

FloorSlip is committed to protecting your privacy & security. This policy explains how and why we use your personal data, to ensure you remain informed & how we control your information. You can decide not to receive communications or change how we contact you at any time. If you wish to do so please use the ‘Contact FloorSlip’ link on the website.

3 ABOUT FLOORSLIP

FloorSlip are an independent professional service offering: -

Floor Pendulum Test Services for clients to comply with HSE laws

Floor Sample Testing

Floor Surface Roughness Tests

Floor Health & Safety

CPR35 / COPFS Expert Witness Services in respect to floor slip, trip and fall injury / accident claims

Sales of Floor Pendulum Test Equipment

Training courses in Floor Pendulum Testing Equipment

Training courses in Floor Health and Safety

4 INFORMATION COLLECTED BY FLOORSLIP

During the execution of our duties, FloorSlip collect data in respect to businesses and the manner by which they conduct business; we also collect data in respect to slip and trip injury claims. The data is collected electronically and physically – as follows:-

Businesses Data you provide – Health & Safety services only

Company (Name, email, contact names, address, telephone etc.)

Businesses Data we collect physically and electronically

Images, maps, statements, artefacts, data sheets, contact details (names, emails and tel numbers)

Personal Data you provide – Expert Witness Cases only

- Defendants and Claimants (Name, address, age, gender).

- Lawyers, Solicitors, Insurance / Accident Investigators etc. (Name, address, emails, telephone numbers)

Defendant / Claimant Data collected physically and electronically

Images, samples, maps, layman’s statements, witness statements, contact details (names, telephone numbers and emails), experts opinions, artefacts, data sheets

Financial Information you provide

- Companies – Bank BACS Details.

- Personal – Nil

DATA STORAGE

We employ measures to keep your data safe and to prevent unauthorised access to, or use or disclosure of information. We only use / store information for as long as required for the purpose collected.  The length of time it is stored depends on the information in question and what it is being used for. From time to time we review what information we hold and delete what that no longer required. In cases between claimant and defendant we do not delete data for 5 years; this period is in the event that new info / evidence arises necessitating a case revisit.

How long data is stored

Electronic data is never stored on the cloud or linked computer systems and we control who has access to information using both electronic password protection and physical means. Printed data is stored securely with access limited to those who are deemed responsible to ensure the data remains secure.

WHAT WE DO NOT DO WITH YOUR DATA

Sell or Disclose Data

We never sell data. Disclosure is only to those persons involved in legal cases pursuant to a floor slip injury case.

Received Communications

Data received electronically or by print is never shared except where parties legally involved in cases of slip injury have the rights to do so and all parties have agreed it can be shared.

  

INFORMATION ON OUR WEBSITE

Links

Our website contains hyperlinks to other websites. We are not responsible for the content or functionality of any external websites (but please let us know if a link is not working by using the 'Contact FloorSlip' link on the website).

Business Names / Genres

Our website details at top level (name only) the companies we conduct business with; a company / business may request at any time to have a name removed by using the 'Contact FloorSlip' link on the website.

Solicitors and Lawyers Business Names and Contact Numbers

Our website has a page detailing name, telephone number and hyperlink to websites of solicitors and lawyers we have (a) done business with; and (b) those who have agreed in communications to allow us to use.

A request may be made at any time to have details removed (or modified) by using the 'Contact FloorSlip' link on the website.

WHAT IS DONE WITH YOUR DATA

Contractual

We only use your data with your consent, or where it is necessary in order to:

- Enter into, or perform, a contract with you;

- Comply with legal duty; 

- Protect the vital interests of you; 

- For our own / third party’s lawful interests (such as courts and judges), provided your rights don’t override these. 

In all events, we’ll only use your information for the purpose(s) it was collected for (or closely related purposes):

Marketing

Occasionally, we send details by email or post or contact by telephone businesses we have dealt with or have found data from internet searches. Requests may be made at any time to have marketing calls stopped by using the 'Contact FloorSlip' link on the website.

Sample Data

Data used for example cases is genre anonymised does not include personal or business data or images that might identify with the owner.

Aggregate Data

We sometimes aggregate and anonymise data to show trends and statistics but it is carried out in a manner that means it can no longer be linked to any particular person or business except by Genre.

ACCIDENTS OR INCIDENTS

If an accident / incident occurs as a result of involvement with FloorSlip in execution of our duties  involving one our staff (including agents), we’ll keep a record of this (which may include personal data and sensitive personal data).

CHANGES TO THIS PRIVACY POLICY

We’ll amend this GDPR/ Privacy Policy from time to time to ensure it remains up-to-date and accurately reflects how and why we use your personal data. The current version of Privacy Policy will be posted on our website. This Privacy Policy was last updated on 30 Mar 19.

KEEPING YOU IN CONTROL / COMPLAINTS

If you as individual or company are unhappy with our approach to data protection or the content is incorrect or requires modification or deletion, then please contact us via the telephone numbers or the ‘Contact Us’ page on the website.

ABOUT GDPR - Extract from and courtesy of Wikipedia https://en.wikipedia.org/wiki/General_Data_Protection_Regulation

Return to Top of Page

The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). It also addresses the export of personal data outside the EU and EEA areas. The GDPR aims primarily to give control to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU. Superseding the Data Protection Directive 95/46/EC, the regulation contains provisions and requirements pertaining to the processing of personally identifiable information (personal data) of individuals (formally called data subjects in the GDPR) inside the European Union, and applies to an enterprise established in the EU or—regardless of its location and the data subjects' citizenship—that is processing the personal data of people inside the EU. Controllers of personal data must put in place appropriate technical and organisational measures to implement the data protection principles. Data protection by design and by default, means that business process that handle personal data must be designed and built with consideration of the principles and provide safeguards to protect data (for example, using pseudonymization or full anonymization where approriate), and use the highest-possible privacy settings by default, so that the data is not available publicly without explicit, informed consent, and cannot be used to identify a subject without additional information stored separately. No personal data may be processed unless it is done under a lawful basis specified by the regulation or unless the data controller or processor has received an unambiguous and individualized affirmation of consent from the data subject. The data subject has the right to revoke this consent at any time. A processor of personal data must clearly disclose any data collection, declare the lawful basis and purpose for data processing, and state how long data is being retained and if it is being shared with any third parties or outside of the EU. Data subjects have the right to request a portable copy of the data collected by a processor in a common format, and the right to have their data erased under certain circumstances. Public authorities, and businesses whose core activities centre around regular or systematic processing of personal data, are required to employ a data protection officer (DPO), who is responsible for managing compliance with the GDPR. Businesses must report any data breaches within 72 hours if they have an adverse effect on user privacy. The GDPR was adopted on 14 April 2016, and became enforceable beginning 25 May 2018. As the GDPR is a regulation, not a directive, it does not require national governments to pass any enabling legislation and is directly binding and applicable. With the United Kingdom scheduled to leave the European Union in 2019, the UK granted royal assent to the Data Protection Act 2018 on 23 May 2018, which contains equivalent regulations and protections. Once the UK leaves the EU, it will become a third country for the purposes of the transfer of personal data outside the EU. This may require an "adequacy decision"[5] by the European Commission on the suitability of the UK's data protection framework, or other appropriate safeguards that may allow such transfers to take place