This Privacy Notice conforms to the guidelines issued by the Information Commissioner's Office ('ICO').
Name of Organisation: The doggy directory
DPO contact details, where applicable:
We do not employ a DPO (Data Protection Officer) as an individual, as we do not meet the following conditions that make it compulsory, i.e. we:
1) are not "a public authority"
2) don't "carry out large-scale [or indeed, any] systematic monitoring of individuals"
3) don't "carry out large-scale processing of special categories of data"
Purposes of the processing:
For recipients, to enable them to access companies contact details and areas of service or products in the online directory. For companies to provide to interested parties their contact details and areas of service including, where applicable, and their details in the form of a online directory.
Categories recipients of the data (who will get to see it):
Companies data in the online directory is provided to the public, however as the database can be viewed by the general public and various media groups. Their accounting data is only used internally. It is up to the new member to give us details which they are happy to be viewed with. Once the member wishes not to continue with their listing their details are removed offline from our database.
What legal ground the organisation is relying on:
Legitimate interest
Countries outside the EU where personal data might be stored or processed:
Potentially worldwide. Our servers are located in the UK.
How long the personal data will be kept:
Indefinitely. Where applicable, out of date data is retained but marked as deleted in accordance with recommended good practice. No sensitive personal data like credit/debt card information is retained.
Inform people of their rights and how they would exercise them:
Objections will be treated as a request for erasure and the company concerned will be deleted (not retained with a deletion marker). Entries in the online directory are regularly asked to update the details held. Objections and requests for erasure are dealt with on an individual basis taking account of the circumstances in any specific case.
Reminder that clients can withdraw consent:
Companies can request erasure and this is actioned promptly. Data is processed on a legitimate interests basis and not on consent. The data in the online directory is provided is publicly available elsewhere.
Inform people that they can complain to the ICO:
Self-explanatory.
Information about automated decision-making, including profiling:
We do not undertake automated decision-making or profiling.
