Policy privacy

FOODCHAINSYNERGY

YOUR RIGHTS

We are committed to protecting your rights to privacy. These include:

• right to be informed about what we do with your personal data;
• right to have a copy of all the personal information we process about you;
• right to rectification of any inaccurate data we process, and to add to the information we hold about you if it is incomplete;
• right to be forgotten and your personal data destroyed;
• right to restrict the processing of your personal data;
• right to object to the processing we carry out based on our legitimate interest

THE PERSONAL DATA WE PROCESS:

We process the personal data of individuals for whom we provide services, including their employees, learners and others linked with joint projects. The personal data may include:

• Names, contact details and dates of birth;
• Financial information and bank details;
• Health information;
• Information about race, ethnic origin and sex

The personal data are generally provided by the person instructing us in relation to consultancy and auditing, and by the individual learner in relation to training.

We process the data because it is in our legitimate interests as consultants, auditors and trainers to do so. We need to be able to communicate with clients and auditees to deliver commissioned services and fulfil obligations to trainees to provide certifications of achievement following training courses.

In relation to any special category personal data, such as health records or information concerning, race or ethnic origin, we rely on the contract basis for processing this data, in addition to our legitimate interest.

In many cases, an individual has consented to the transfer of their personal data to us. Where an individual has consented, he or she may easily withdraw it by notifying Ms Maria A. Gomez at [email protected].

OTHER PERSONAL DATA

We also process personal data pursuant to our legitimate interests in running our business such as:

• Invoices and receipts;
• Accounts, VAT and tax returns;
• Insurance policies and related documents

As an employer, we process personal data further to contracts of employment with our employees. The information includes:

• Names, addresses and contact details;
• Pay and bank details, pay slips;
• Curricula vitae, contracts of employment, references and appraisals;
• Health information.

In our capacity engaging sub-contractors, we process personal data further to our terms of engagement. The information includes:

• Names, addresses and contact details;
• Pay and bank details, pay slips;
• Curricula vitae, contracts of employment, references and appraisals

RETENTION PERIOD

Personal data in legal cases is retained, where necessary, for six years in compliance with our professional indemnity obligations. Where this is not necessary, it is destroyed on the conclusion of the case.

Administrative data is retained for up to six years as necessary. Where it is not necessary to retain the data for six years, it is destroyed as soon as possible.

Personal data relating to employees who have left our employment is also retained for up to six years as necessary. This is the time limit for bringing a breach of contract claim.

Personal data relating to sub-contractors who are no longer engaged is retained for up to ten years, as considered reasonable should it be required by our professional indemnity insurers.

WHOM DO WE SHARE PERSONAL DATA WITH?

We share personal data internally strictly on a need to know basis.

Special category data and personnel files held electronically are encrypted with restricted access. Hard copy special category and other personal data is stored securely with restricted access.

We do not share personal data with anyone external to the organisation (with the unlikely exception of with government officials when legally required to do so).

FOODCHAINSYNERGY is responsible for the treatment of your personal data. This privacy policy provides information about the personal data we process about you, in compliance with the General Data Protection Regulation (Regulation 2016/679 of the European Parliament and of the Council, of 27 April, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

1.- Personal data treatment: is aimed to maintain a commercial relationship with our clients and the users of this web site.

Our services include consultancy, translation, interpretation, auditing, training, expert witness services, and any other related services that the user may request from us through any of the contact forms available to you.

We also may deliver commercial communications related to our services through any electronic or paper format, present or future, that allows us to communicate commercially.

2.- Data retention: Personal data will be retained for as long as it is in our mutual interest  to do so. When not deemed necessary for the purpose, personal data will be erased from our system with an appropriate level of security and confidentiality.

3.- Communication of data:  The user has the rights of information, access to and rectification or erasure of personal data, the right to data portability, and the right to claim to the controlling authority, www.agpd.es. In order to exercise these rights, the user shall notify FOODCHAINSYNERGY sending his/her National ID or Passport No. through email:  [email protected].

4.- Mandatory nature of the information supplied by the user: By ticking the relevant click-box, users freely and unambiguously accept that personal data need to be supplied to us in order to adequately manage their request. The user is responsible for supplying us with accurate information, and for the notification of any changes related to their personal information.

FOODCHAINSYNERGY informs the users that their personal data will not be shared with any third parties in any circumstances. Should this be necessary, the transfer of any personal data to a third party will be only done under the user’s clear authorization in writing.

All personal information supplied by the user through this web page is mandatory, as deemed necessary for the delivery of our service. In the case that incomplete data is supplied, we cannot guarantee that the service delivered will cover your needs in an appropriate manner.

Security measures: According to the personal data protection Regulations, we, as the Controller, comply with the requirements laid down in the personal data treatment legislation and the principles laid down in Article 5 of the GDPR.

We guarantee that appropriate technical and organizational policies are in place for the implementation of security measures as laid down in the GDPR, aimed to protect the user´s rights, and that users have been notified adequately the means to exercise them.