The categories of personal data we are processing
We are processing your:
Business mobile phone number (if applicable)
Business email address
Where we obtained your personal data
Details of the processing
Data HQ Limited is processing your data on the basis that it has a legitimate interest pursuant to Article 6(1)(f) of the GDPR to process your data for commercial purposes. We will process your data in the following ways:
Store it in our secure servers. Your personal data is stored on our secure, UK based network, which meets internationally recognised security standards. Our systems are certified to Cyber Essentials Plus standards, and our hosted servers are certified to ISO 27001
Use and refer to it for statistical and marketing intelligence analysis
Combine it with other personal data to form marketing lists
Licence or sell those lists to other customers who would like to market to you (categories of these customers are listed below)
Recipients of your Data
In pursuance of our commercial purposes we will transfer your personal data to some or all of the following categories of recipients/industries:
Agriculture, Hunting and Forestry
Mining and Quarrying
Electricity, Gas and Water Supply
Wholesale and Retail Trade; Repair of Motor Vehicles and Goods
Hotels and Restaurants
Transport, Storage and Communication
Real Estate, Renting and Business Activities
Public Administration and Defence, Compulsory Social Security
Education, including Higher Education
Health and Social Work
Other Community, Social and Personal Service Activities
Your data is not transferred internationally by us. It may be disclosed to international organisations with offices within the European Economic Area only. These organisations will be subject to an adequacy decision pursuant to Article 45 from the European Commission.
Data Retention Period
Your data will be retained only for the duration of our licence with 118 Data Resource Limited. Once the licence is concluded Data HQ Limited will erase your personal data.
We do not conduct specific profiling or automated decision-making processes on your data. We will use it to generate market intelligence analysis and general statistical analysis. These processes will not have any foreseeable legal affects concerning you.
IMPORTANT – Your Rights
Access - Firstly you have the right to access your personal data (a Data Subject Access Request). You will need to prove your identity to us in order for us to provide you with access to the personal data we are processing.
Rectification - If your personal data is inaccurate, you have the right to have it rectified.
Erasure - Under certain conditions you have the right to have your personal data erased from our database, (the right ‘to be forgotten’).
Restriction - You can suppress the processing of your personal data. This might be applicable where you do not object to us holding it, but you do not agree to it being processed in certain way/s.
The Right to Object - Where a data controller processes your personal data because they have legitimate interests to process it where your consent has not been obtained vis-à-vis that processing, you may object to that processing.
Data Portability - If you provided us with your personal data directly, and we are processing that data in a digital format, based on your consent or under a contract between us, you have the right to request a machine-readable copy of the personal data we are processing.
Automated Individual Decision-Making or Profiling - You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects you. This applies to processes without human intervention. As mentioned above, this does not apply to the processing of your personal data by Data HQ Limited in this instance.
Objecting to Processing
If you do not want Data HQ Limited, or its recipients as listed above to process your personal data as explained above, you may exercise your rights to object or to erasure. you can do this by contacting the DPO at the above email address at any time, and we will comply with your request in accordance with the relevant provisions of the GDPR.
Making a Complaint
You have the right to lodge a complaint with the Supervisory Authority, which in the UK is the Information Commissioner’s Office (ICO). Full details can be found on the ICO’s website www.ico.org.uk