Public Privacy Notice
Introduction
GPML is dedicated to protecting the security and privacy of your Personal Data.
Under the Law GPML is required to inform Data Subjects of their statutory rights and provide them with a range of related information.
The aim of this Public Privacy Notice is to ensure that individuals who use our website, have knowledge of the relevant rights and responsibilities due to, and from, GPML concerning Personal Data.
Definitions:
Personal Data – Any information relating to an identified or identifiable individual.
Special Category Data – Personal data revealing an individual’s racial or ethnic origin, political opinion, religious or philosophical belief, trade union membership, genetic data, biometric data, health data, data concerning an individual’s sex life or orientation, criminal data.
Data Subject – An identified or identifiable individual to whom personal data relates
Data Controller – A person (individual or legal) that determines the purposes and means of the processing of any personal data.
Data Processor – An individual or other person who processes personal data on behalf of a controller and includes a secondary processor (another processor engaged by the primary processor).
WARNING
This privacy Notice is only meant for those who have NOT yet entered into Terms of Business (“contractual relationship”) with GPML but have submitted their Personal Data via our website. GPML’s website: www.gowerpensions.com
Disclaimer
By using this Site, you are accepting this Privacy Statement. If you do not agree to this statement, please do not continue to use our Site. Visitors to the Site are encouraged to review this statement from time to time as we reserve the right to change or modify this at any time.
Our privacy statement does not apply to any links to other sites which may appear on our Site; please be aware that we have no control over these sites.
GPML’s promise
In respect of your Personal Data, GPML will adhere to the following principles when processing your Data:
Lawfulness, Fairness and Transparency;
Purpose Limitation;
Minimisation;
Accuracy;
Storage Limitation;
Integrity and Confidentiality;
Accountability.
1. What is the purpose and legal basis for processing?
The legal basis of processing your Personal Data, entered onto our website, is that of Consent. By entering your Personal Data, reading the Consent Disclosure and clicking the “Submit query” button; you will have consented to GPML processing your information.
This consent can be revoked by you at any time by writing to GPML’s Data representative (See Section 17).
If a contractual relationship is established your Personal Data will then be processed in line with GPML’s Terms of Business and Privacy Policy.
2. What is the legitimate interest of GPML processing my Personal Data?
GPML’s interest in collecting and processing your Personal Data, via the website, is to contact you regarding services offered by GPML.
3. Who is responsible for my Personal Data?
Whilst this notice refers to GPML as an entity, those who are ultimately responsible for its actions are the members of the Board of Directors; who should be considered responsible for the collection and processing of your Personal Data.
4. What information will be collected?
GPML will collect the Personal Data via your submission. GPML will not hold or accept Personal data of an individual without first making that Data Subject aware of this Public Privacy Notice.
5. Categories of Personal Information
What is Personal Data?
This is information through which you, as an individual, can be easily identified, such as your name and contact details.
6. What is Special Category data?
Special Category Data refers to Personal Data which is recognised as more sensitive, and is therefore given higher levels of protection. This can include health information, race and ethnic origin, sexual orientation etc.).
7. Will GPML collect any Special Category data?
At this stage GPML will not request, collect or process any of your Special Category Data.
Only once a contractual relationship has been established will Special Category Data be discussed, if required.
8. Will my Personal Data be used to directly market to me?
Only in as much as you have requested that GPML make contact with you. Please note that GPML will not pass on your Personal Data to third parties for marketing purposes.
9. Will GPML pass on my information?
No. The information disclosed under this Privacy Notice will not be used for any other purpose than to contact you as the Data Subject. (See Section 11).
10. Will my information be transferred to an unauthorised jurisdiction?
GPMLwill not transfer your data to an unauthorised jurisdiction.[1] The exception to this rule is if you, as the Data Subject, exercise your Right and request that your Personal Data is sent to another Data Controller in an Unauthorised Jurisdiction.
11. How long will my information be kept?
GPML’s legal basis for handling your data is rooted in Consent; therefore your data will not be kept any longer than it reasonably necessary; meaning:
1). If you decide not to enter into a contractual relationship with GPML, your Personal Data will be erased from our systems.
2). You decide to undertake business with GPML, your Personal Data will be processed in line with GPML’s Terms of Business and Client Privacy Policy
12. Is my information secure?
As a Data Subject, your Personal Data may be held both physically and digitally.
All data that is held in a physical form (letters, files, application forms, etc.) is either held securely at GPML’s office or at a locally based archivist.
In respect of information held electronically, GPML has security systems to ensure that all Personal Data is protected from cyber based risks. As a demonstration of this, GPML has achieved the Cyber Essentials Certificate accredited by IASME. For more information please contact GPML’s Data Representative (See Section 17).
13. How can I access, amend or remove my Personal Data?
GPML has built a number of internal processes to ensure that any request you make can be handled competently and swiftly.
Should you wish to view, amend or remove your Personal Data, the process can be started by contacting GPML’s Data Representative (See Section 17).
14. Who will handle my Data?
Due to the size, nature and complexity of GPML, all Personal Data is considered as confidential and will only be handled by Employees of GPML.
To ensure that Personal Data is handled appropriately, every Employee of GPML has been subject to its Recruitment process and Training and Competency scheme.
Should you, as the Data Subject believe there to be a Conflict of Interest with an Employee of GPML having access to your information please raise this immediately. GPML has procedures in place to ensure that your information, if required by you, can be subject to restrictive viewing.
15. What happens to my information when using the website?
GPML uses cookies and collects IP addresses (an IP address is a number that can uniquely identify a specific computer or other network device on the internet). We use analysis software (Google Analytics, Awstats) to look at IP addresses and cookies for the purpose of enhancing your user experience.
This information is not used to develop a personal profile of you and the log files are regularly purged.
This information will be kept confidential except where disclosure is required or permitted by law (for example to Government bodies and Law enforcement agencies). GPML does not sell or otherwise transfer any personal data to commercial companies or other organisations, with the exception of Web Statistics (see below) which is hosted and managed by a third party company (Google, Inc).
GPML collects this information to help us understand how the website is used in order to maintain and improve it and to deal with your requests providing you with information about products and services.
Cookies, Web Statistics and third party monitoring
GPML maintains continuous logs of its web server activity. These log files include the details of website users’ IP address, browser type and page last visited, etc. The log files are used to analyse how the website is being used by visitors and may be kept in an anonymised form for historical records.
GPML’s website uses hosted web analytics software. This hosted service is provided and managed by a third party company (Google, Inc). The service ‘Google Analytics’ uses ‘cookies’ (a text file sent to users’ computers as they browse our website) to help analyse how users navigate our website. The information generated by the cookie regarding our website (including IP addresses) will be anonymised and transmitted to and stored by Google, Inc. on servers that may be hosted in the United States. Google, Inc. will use this information for the purpose of evaluating use of our website, compiling reports on website activity for website operators and providing other related services.
Google, Inc. may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google, Inc’s. behalf. Google, Inc. will not associate your IP address with any other data held by Google, Inc.
You may decline the use of cookies by configuring your web browser to do so, but it may affect your user experience.
By using GPML’s website, you consent to the processing of data about you by Google, Inc. in the manner and for the purposes set out above.
16. What rights do I have under the Data Protection Law?
Under the Law, your existing rights have been enhanced. Below are those which apply to GPML and the acquisition and processing of your Personal Data.
The right to information regarding the processing of Personal Data when collected from the data subject.
This Privacy Notice is designed provide you with clear and concise information regarding the intended use of your Personal Data, your rights as a Data Subject, GPML’s official contact details and other relevant information regarding your Personal Data.
Should you require any further information please contact GPML’s Data Representative.
The Rights to Data Portability
You have the right to request GPML to provide, move, copy or transmit your Personal Data to another data controller.
The Right of access
As stated above, have the right to make a written request for a copy of your Personal Data held by GPML. This must be addressed to GPML’s Data Representative who will provide you with more information at that time.
You are not ordinarily entitled to receive copies of our documentation, but we may choose to provide you with such copies of documents at our sole discretion. In addition, we are not required to respond to requests for Personal Data that we consider to be frivolous, vexatious, unnecessarily repetitive or excessive.
The Right to Object to processing for direct marketing purposes
The purpose of submitting your Data, via the website, was to enable GPML to contact you regarding its services.
GPML will not use your information to directly market to you.
The Right to rectification
If you dispute, or have reason to believe, that the Personal Data held by GPML is no longer accurate then you have the right to request that it is updated.
Please note that depending on the nature of the information.
The Right to erasure
As stated, if no longer reasonable to hold your Personal Data, GPML will have it erased/destroyed. However, it is still your right to request that your Personal Data be erased.
The Right to restriction of processing
You have the right to impose a restriction, for a period of time, on GPML’s processing of your information.
However, given the nature of how and why GPML processes Personal Data; any restriction could result in a limitation of the service provided to you.
The Right not to be subject to decisions based on automated processing
The processing of your information is done manually, with no processing being done on an automated basis.
17. Who do I contact at GPML regarding my Personal Data?
For all matters concerning your Personal Data please contact: Mr Scott Rowe - [email protected]
PO Box 129, Suite 2, Weighbridge House, Le Pollet, St Peter Port, Guernsey GY1 4EH
Tel: 01481 700200
18. How do I make a Complaint?
You have the right, as a Data Subject, to make a complaint should you believe GPML to be in breach of its duty as Data Controller. You may follow GPML’s Complaints Procedure or make the complaint directly to the Office of the Data Protection Commissioner:
Office of the Data Protection Authority,
St Martin’s House,
Le Bordage, St. Peter Port,
Guernsey, GY1 1BR
Tel: 01481 742074
Email: [email protected]
Changes to this Privacy Statement
This Privacy Statement may be updated from time to time so you may wish to check it each time you submit personal information to GPML’s website
The material contained on the Site is for information only and does not constitute legal or other advice. GPML will act in accordance with the requirements of the Data Protection (Bailiwick of Guernsey) Law 2017 and the European Communities (Implementation of Privacy and Electronic Communications) (Guernsey) Ordinance, 2004.
Disclaimer: This fact sheet, is designed for those who have signed a Terms of Business with GPML and is meant as a general guide to GPML’s Data Protection and Usage Policy. Please do not hesitate to contact GPML to query anything you don’t understand and would like further information.
Please note that Personal Data may be transferred to another firm upon the sale of all or part of GPML, or as otherwise required or permitted under applicable Laws or Regulatory Rules or by the GFSC or the Data Protection (Bailiwick of Guernsey) Law 2017.
Gower Pensions Management Limited
Registered Office:
Suite 2, Weighbridge House, Le Pollet, St Peter Port, Guernsey GY1 1WL
Guernsey, is licensed by the Guernsey Financial Services Commission. Company Number 1022098
