Aerodyn (“we”,“us”,”our”) believes your data is a precious commodity and we know it is your right to total transparency and control on how we use it. We have implemented strong data privacy and security safeguards to ensure that you are protected to the highest extent possible.
This policy outlines what data we collect, how we use it and the safeguards we put in place to protect it.
You can contact our voluntarily appointed Data Protection Consultant at dataprotection@aerodyn.co.uk if you have any concerns or wish to exercise your rights.
If you are an EU Data Subject you can contact our EU Representative, Rune Peterson, at eurep@fifthsquare.eu. Our EU Representative complies with our obligations under GDPR Article 27 and is established in the Republic of Ireland. Please note that our EU Representative is a Third Party. They will process your personal data in accordance with this Privacy Policy.
Our Promises
We are committed to your data privacy and security. As such we give you these promises:
- We will only collect data about you that is relevant and necessary
- Your data will only be held on systems that meet compliance standards
- Your data will only be accessed by those who need it and we will minimise the amount of data that is processed, wherever possible
- We will not share or sell your data to any third party except for the marketing of our own services to you unless either you have agreed, we are required to share it by law or we need to fulfil our service commitments to you through a third party that meets our own privacy standards
- We will always remember that it is your personal data, not ours. As such we will ensure complete transparency and openness with you wherever possible
- We respect your rights as outlined in the next section and will respond to all requests promptly
Your Rights
You have the following rights over any data we hold about you:
- Right to object to processing at any time
- Right to opt out of marketing at any time
- Right to have inaccurate data corrected
- Right to erasure of personal data from our database
- Right to export of personal data
You can read more about your rights here.
If you would like to uphold your rights then please contact our Data Protection Consultant at dataprotection@aerodyn.co.uk
If you are dissatisfied with our response you also have the right to lodge a complaint with the Data Protection Authority. This can be done at https://ico.org.uk/concerns/
Collecting Data
We collect information about you in two key ways:
- Passive – you give us information on our website, email us, call us, send us a CV, meet one of us at events or meetings or approach us on social media
- Proactive – this is data about you that we may hold from referrals, resellers or proactive marketing activity.
We try and minimise the personal data held on you. Typically, this is restricted to:
- Your personal contact details – email address, IP Address, phone numbers, business related social media page such as LinkedIn, source of your data and legal reason for the holding of your information.
- Your company details – as above but also address, website and other public held information including credit rating and invoicing details if relevant
- Transmitted information – such as emails, texts, messaging, phone call information and recordings, voicemails, email, meeting notes and document tracking information.
Processing your Data
Data is processed/stored on encrypted systems on-premises and on hosted cloud services such as Microsoft 365.
As such, some data will either be in UK and EU data centres or on US based servers where suitable safeguards have been put in place. We may also process your data in countries outside the UK or European Union from time to time in other aspects of our business.
We use the following safeguards with respect to data transferred outside the United Kingdom or European Union:
- The processing is carried out by agents, suppliers or other entities required to process in the course of our contractual obligation with you. These entities are obligated to uphold the same standards of Data Protection and Security as our UK entity
- We use adequacy decisions or Standard Contractual Clauses in our contracts with data processors
- We carry out due diligence where Standard Contractual Clauses or other variance of terms is not possible (for example with Microsoft)
We regularly review suppliers for data security compliance to ensure your data is safe and track where your data is held.
We also use your data to market to you, fulfil contractual arrangements or for agreed purposes. Calls may be recorded for information holding, quality and training purposes. Our email, document management and website analytics are used for information purposes and to track breaches of copyright. All our processes are subject to various internal policies to ensure that your data privacy and security is upheld.
You may contact us if you are concerned about the processors we use.
Website Content
Our website is a publishing medium. Anyone may register and then publish information about himself, herself or some other person through our blog. We attempt to moderate user generated content, but we are not always able to do so as soon as that content is published. If you find any content from a contributor that you believe is offensive, illegal or may negatively impact you or others then please let us know and we will investigate the matter
Retention
Dependant on the data you provide us and for what purpose it is provided we may need to retain your data for up to 6 years. If you wish to find out more about your specific data retention, please contact us.
Data Permissions
Every marketing email sent from Us allows you to opt out of receiving emails from us, except for the purposes of fulfilling any contractual arrangements.
You can also contact us at the email address above and request to opt out, view, export or delete your data.
If you request for your data to be deleted, your name and email address will be added to an exceptions list and all other data removed.
Third Parties
We use re-marketing services from third parties. These rely on the use of cookies. You can read more about these in our Cookies Policy.
We also share information where agents, resellers or suppliers are involved in the delivery of your service.
Our website and other materials sent to you may contain links to other third party websites. We may also offer buttons to social media that link to third party services. We are not responsible for the content or your data privacy these sites provide through their tools or sites.
Legal Compliance
We seek to uphold our legal obligations as covered by the Data Protection Act 2018 and the General Data Protection Regulation 2016. Our Data Protection Authority is designated as the ICO.
This Privacy Policy is reviewed on a regular basis and was last reviewed on the 19/05/2021.