GDPR Policy

Introduction:

This policy outlines Ecoden Constructions Ltd commitment to protecting personal data in accordance with the General Data Protection Regulation (GDPR). The policy sets out Ecoden Constructions Ltd’s
obligations and the rights of individuals in relation to the processing of their personal data.

Purpose:

The purpose of this policy is to ensure that Ecoden Constructions Ltd processes personal data in a manner that is lawful, fair, and transparent. The policy outlines the steps Ecoden Constructions Ltd will take to protect the privacy of individuals and to ensure that their personal data is treated with the
utmost care and respect.

Definitions:

For the purpose of this policy, the following definitions apply:

Personal data:

Any information relating to an identified or identifiable natural person.
Processing: Any operation or set of operations performed on personal data or on sets of personal data, such as collection, storage, use, alteration, and deletion.

Responsibilities:

Ecoden Constructions Ltd is responsible for ensuring that personal data is processed in accordance with the GDPR. Ecoden Constructions Ltd will appoint a Data Protection Officer (DPO) who will be responsible
for overseeing the implementation of this policy and ensuring that Ecoden Constructions Ltd complies with its obligations under the GDPR.

Collection of Personal Data:

Ecoden Constructions Ltd will collect personal data only for specific, explicit, and legitimate purposes. Ecoden Constructions Ltd will inform individuals of the purpose for which their personal data will be used, and will obtain their consent where necessary.

Storage of Personal Data:

Ecoden Constructions Ltd will store personal data in a manner that ensures its security and confidentiality. Personal data, including contact details and any other information provided by the individual, may be stored in Ecoden Constructions Ltd’s client and contacts database(s) and may be
viewed by any of Ecoden Constructions Ltd’s employees in any place where Ecoden Constructions Ltd conducts business, except financial data, which can only be accessed by senior staff. Financial data is kept by Ecoden Constructions Ltd for 6 years in accordance with HMRC law, and after 7 years, the
paperwork is securely destroyed, although digital data may be stored for a longer period. Project information may be kept for up to 12 years.

Use of Personal Data:

Ecoden Constructions Ltd will use personal data only for the purposes for which it was collected. Ecoden Constructions Ltd will not use personal data for any other purpose without the individual’s consent.

Disclosure of Personal Data:

Ecoden Constructions Ltd will not disclose personal data to any third party unless it is necessary for the fulfillment of the purpose for which it was collected or with the individual’s consent.

Rights of Individuals:

Individuals whose personal data is held by Ecoden Constructions Ltd have the following rights:

• Access to their personal data
• Rectification of any inaccuracies in their personal data
• Erasure of their personal data
• Objection to the processing of their personal data
• Restriction of the processing of their personal data
• Data portability

Ecoden Constructions Ltd will respond to any of these requests within 28 days or within 56 days if the request is complex. If a request is denied, the individual will receive a written explanation.

Breach of Personal Data:

In the event of a breach of personal data, Ecoden Constructions Ltd will take appropriate action to remedy the breach and to prevent similar breaches from occurring in the future. Ecoden Constructions Ltd will notify individuals of any breach of personal data that affects their rights and freedoms.

Conclusion:

Ecoden Constructions Ltd is committed to protecting the privacy of individuals and to ensuring that personal data is processed in accordance with the GDPR. Ecoden Constructions Ltd will review and update this policy on a regular basis to ensure that it remains compliant with the GDPR.