This privacy notice provides information regarding personal information/data that Simvic Ltd processes about you. All information we process complies with the General Data Protection Regulation (GDPR). Simvic Ltd is a licenced recycling facility located at Unit 4 Fordwater Trading Estate, Chertsey, KT16 8HG.
Why do you store my data?Simvic Ltd has a legal obligation to store personal data securely in order for us to be compliant with the Scrap Metal Dealers Act (SMDA) 2013. For more information on why we are legally obligated to store your data please visit the following sites: http://www.legislation.gov.uk/ukpga/2013/10/enacted https://www.recyclemetals.org/rules-regulations/scrap-metal-dealer-s-act.html
What information do we store?Customers – We store personal information including contact name, address, email address, telephone number and bank account details. Suppliers – We store personal information including contact name, address, email address, telephone number, bank account details and photographic identification (Passport or Drivers licence.
Who can access my data?We do not share any information with anyone outside of the organisation. Data will never be passed onto third parties without first acquiring consent.
Your rights(1) Right to obtain information – All persons are entitled to view copies of all the data we store. You can request copies of your data at all times. Simvic Ltd will provide this information within 28 days of the initial request. (2) Right to be informed of the data we store – All persons have the right to understand why, how and where we store our information. This information is all detailed within this document, however if you require further information our data controller will provide this upon request. (3) Right to rectification – If data is inaccurate you are entitled to change information, however due to the nature of our business we required to attain certain records for up to 7 years. (4) Right to object us storing information – You have the right to object us taking your personal data, however if you do so you cannot use our services. Simvic Ltd is compliant alongside the Scrap Metal Dealers Act 2013 (SMDA) which requires us to store data to ensure compliance from all suppliers and customers. (5) Right to notified of a data breach – In the rare event of a security data breach, all persons shall be informed within 72 hours without undue delay. The data processor has to disclose the nature of the breach, describe the likely consequences and ensure all persons are informed of the measures being taken to control the breach.
What are the legitimate obligations for processing data?Simvic Ltd is the data processors for all customers, suppliers and employees. The processor is answerable for all processing of data contracted by a main data controller who is in charge. The processors of information are compelled to store information in accordance to both GDPR (2018) and SMDA (2013).
Employee DataAs an employer we process and store all employee data securely which we are legally obligated to store for 6 years. This includes:
- Name, address, contact details.
- Pay roll details (national insurance number, tax number, pension details).
- Bank account details.
- Medical information.
- Emergency contact details.
- Local authorities (HMRC, VAT).
- Police authorities (Investigation of crime).