Banks and Lloyd Shipping Ltd
With effect from 25th May 2018, the General Data Protection Regulation (GDPR) has become law in the UK and throughout the EU. The Regulation will continue to apply in the UK after the country leaves the EU and supercedes the Data Protection Act 1998.
The GDPR has been developed to ‘strengthen and unify’ the data protection arrangements throughout the EU.
GDPR seeks to control information relating to an identifiable individual and provides protections to the individual including the following:
Data must be
- *Processed lawfully
- Collected for specified and legitimate purposes
- Limited to what is necessary
- Accurate and kept up to date and held for the purposes for which it was collected
- Kept no longer than necessary
- *Processed with appropriate security
*For the avoidance of doubt, “processing” includes the collection, holding, using, disposing of, retaining, disclosing and destroying of the data.
As your customer or supplier Banks and Lloyd Shipping Ltd may process personal data about identifiable individuals because:
- the data is necessary for a contract between our businesses or because you have asked us to quote for our services or we wish you to quote us for your services
- we have a legal obligation to process this information in line with HMRC /VAT or other UK/EU statutory authority
- there is a legitimate business reason for continuing to process your personal data – in order to recontact you with updates on the services available to move your cargo, to update you on HMRC rules and regulations, to provide you with updates on global transport situations in which we can reasonably assume you have a vested interest.
The data we process may include the following categories:
- Contact telephone/mobile numbers
- Your business’s email address(es)
- Your business’s bank account details
- Your business’s VAT and Company Registration Number
- Your business’s EORI number
- Delivery addresses and named contacts at the delivery point(s)
This data is processed in relation to our business to business relationship, to allow us to fulfil our contractual obligations to you in the routing, clearance and delivery of cargo and to satisfy our legal obligations to EU and UK statutory authorities in the maintenance of records and to keep you abreast of latest developments and current challenges relating to global freight transport.
The data may be processed by the Directors, Managers and Staff of the Company. Such data is firewall protected and subject to a back-up regime.
Such data will be retained only for as long as is required to meet the Company’s legal obligations, to maintain a contract between employer and employee or in line with the Company’s legitimate interests.
Banks and Lloyd Shipping Ltd does not process special category data of its customers or suppliers, or use automated decision making or profiling methods.
Banks and Lloyd Shipping Ltd will share your data with our subcontractors for the purposes of quoting, routing, customs clearance and delivery of your cargo but will not transfer your personal data outside of the EU without your express consent or unless the transfer is necessary for the performance of a contract with you, or for the establishment, exercise or defence of a legal claim.
Your rights under GDPR
All data subjects have rights under the GDPR. Those rights are as follows:
- The right to be informed. You have a right to know what kind of data is held about you.
- The right of access. You have a right to see the data that is held about you.
- The right to rectification. You have the right to have your personal data rectified if it is inaccurate or incomplete.
- The right to erasure. You have the right to request your data be deleted if there is no lawful compelling reason for its retention.
- The right to restrict processing. You have the right to block further processing of your data if you believe it is inaccurate or the processing is unlawful.
- The right to data portability.
- The right to object. You have a right to object to further processing of your data unless the processing is for the exercise or defence of a legal claim.
- Rights in relation to automated decisions making and profiling.
The Data Controller is Banks and Lloyd Shipping and the person with day to day responsibility for data processing is Diane Verzijl who can be contacted at GDPRrequest@banksandlloyd.com
In the UK the supervising authority regulating the GDPR is the Information Commissioner’s Office (ICO) with whom you have a right to lodge a complaint.
Our Privacy Notice will be reviewed on a regular basis and updated to ensure it is always up to date and accurate.