A. L. Lee Farming Company Privacy Policy

Revision Date: 16/5/2018

Introduction

A. L. Lee Farming Company  (“we”, “our”, “us”) are committed to protecting and respecting your privacy.

This policy sets out the basis on which any personal data that you provide to us or we collect from you will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting allee-farms.co.uk you are accepting and consenting to the practices described in this policy.

For the purpose of the General Data Protection Regulation (“GDPR”) the data controller is A. L. Lee Farming Company (Company Number 08798484). A. L. Lee Farming Company is registered as a Data Controller with the Information Commissioners Office with the registration number; A1087830

How is your information collected?

A. L. Lee Farming Company collects information about you in three ways;

Information you give us;

We will collect and process data that you give us in the following ways:

1.  Information that you provide by completing forms on our website; allee-farms.co.uk. This includes, but is not limited to subscribing to our   newsletter, requesting a trade account, applying for a job vacancy or contacting us with a question or query.

2.  Information that you provide in person at our offices.

3.  Information that you provide when contacting us by telephone, letter, fax, e-mail, SMS or instant message

Information that we collect from other sources;

We will collect and process data about you that we receive from third parties in the following ways;

1.  Information that you provide to our agents (ie. property management agents)

2.  Previous or current employers for the purpose of referencing

Information collected automatically:

Each time you visit the allee-farms.co.uk website, information related to your use of our website is collected. We categorise this information as Technical Data and Usage Data.

Our third party hosting provider collects and stores server logs to ensure network and IT security and so that the server and website remain secure. This includes analysing log files to help identify and prevent unauthorised access to our network, the distribution of malicious code, denial of services attacks and other cyber attacks, by detecting unusual or suspicious activity.

We have a legal obligation to implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of our processing of information about individuals. Recording access to our website using server log files is such a measure.

We use Google Analytics to analyse the use of our websites; Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users' devices. The information generated relating to our website is used to create reports about the use of our website. Details captured during your visit will include, but not limited to, IP Address, traffic data, location data, weblogs and other communication data and the resources you access, however, all data collected is anonymous and will not identify you as an individual. Google store this activity data.

You can view Google's privacy policy here - http://www.google.com/privacypolicy.html
To opt out of being tracked by Google Analytics across all websites, please visit https://tools.google.com/dlpage/gaoptout

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our Cookies Policy.

In order to prevent and detect crime, and to ensure the safety of our clients and staff, we operate CCTV systems at various locations. These cameras record footage in real-time and are operated and controlled by our own IT staff. Monitoring and recording does not take place in any personal areas and any recordings are kept securely and only accessed by authorised members of staff.

What information do we collect?

We may collect, use, store and transfer different kinds of personal data about you. We have categorized this data below;

Identity Data; Includes Title, Full Name, Date of Birth, Marital Status, National Insurance Number

Contact Data; Includes Address, E-mail Address, and Telephone Numbers

Financial Data; Includes Bank Account Details

Recruitment Data; Includes Previous Employer(s), Jobs Held at Other Companies, Previous Salaries, Skills and Qualifications Obtained, Referees

Video Data; CCTV footage

Technical Data; Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.

Usage Data; Full Uniform Resource Locator (URL) from which you accessed our site or that you visit after our site; properties you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page

How and why do we use the information that we collect

We are only permitted to use your personal information if we have a legal basis for doing so. The lawful bases are outlined in Article 6, Section 1 of the GDPR.

1. 'Your consent'

2. 'Performance of a contract'

3. 'Compliance with a legal obligation'

4. 'Protection of your, or another's vital interests'

5. 'Public interest/official authority'

6. 'Our legitimate interests'

We rely on the following legal bases to use your personal information:

Reason

Categories of Data Processed

Lawful Basis for Processing

Processing and responding to a query from you

Identity, Contact

Your Consent

Processing an application for employment and obtaining references.

Identity, Contact, Recruitment

Your Consent

Sending newsletters

Identity, Contact

Your Consent

CCTV recording

CCTV

Legitimate Interests (protection of our property and staff)

To administer our website, including troubleshooting, data analysis, testing, research, and statistical purposes, to allow you to participate in interactive features of our service, when you choose to do so.

Technical, Usage

Legitimate Interests (providing a better service for you and our other customers). We will comply with our cookie policy when processing this information.

When the lawful basis is your consent we will always ask for your consent and explain why we need the personal information at the time of asking for your consent. If we are relying on consent, you can withdraw your consent to our processing of your personal information at any time by contacting us.

Storage of your personal data

All information you provide to us is stored and processed on secure servers at our offices or on those provided by our service providers in the UK.

We reserve the right to transfer the data that we collect from you or about you to be stored at a destination outside the European Economic Area ("EEA") where it will also be processed by staff operating outside the EEA who work for us or for one of our suppliers. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy and the GDPR.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

We have put in place procedures to deal with any suspected data security breach and will notify a Data Subject, the ICO and any other applicable regulator of a suspected breach where we are legally required to do so.

Who do we share your personal data with?

We will not share your data with anyone for marketing purposes. However there are occasions when we must share your data;

In order to provide our services, and to fulfil our contractual obligations to you, we may share your information with selected third parties including but not limited to:

1. External Service Providers (ie. Hosting providers)

2. Analytics Providers (ie. Google Analytics)

3. External Service Providers

4. Previous Employers (for the purpose of obtaining references)

We only allow our service providers to handle your personal data if we are satisfied they take appropriate measures to protect your personal data. We also impose contractual obligations on service providers relating to ensure they can only use your personal data to provide services to us and to you.

We may disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.

We may also need to share some personal data with other parties, such as potential buyers of some or all of our business.

How long will we keep your personal information for?

How long we keep your personal information for depends on the services we deliver to you. We will never retain your personal information for any longer than is necessary for the purposes we need to use it for.

Automated Decision Making

We do not use any automated decision making processes

Children

We do not knowingly collect information from children under the age of 18 and our services are not targeted at children under 18. We will not knowingly accept any data from a person who is under the age of 18 years.

Your Rights

Under certain circumstances GDPR legislation provides you with the following rights:

Legal Right

What We Do

Right to be Informed

Individuals have the right to be informed about the collection and use of their personal data. We publish this privacy notice in order to keep you informed.

Right of Access

Individuals have the right to access their personal data and supplementary information. If you wish to access the personal information we hold about you, please contact us at privacy@allee-farms.co.uk or by writing to; Data Protection Officer, A. L. Lee Farming Company, Farm Office, Whitebridge Farm, Ely Road, Littleport, CB6 1RT.

Right to Rectification

Individuals have the right to have their personal data rectified. If you need us to rectify the personal information we hold about you, please contact us at privacy@allee-farms.co.uk or by writing to; Data Protection Officer, A. L. Lee Farming Company, Farm Office, Whitebridge Farm, Ely Road, Littleport, CB6 1RT.

Right to Erasure

Individuals have the right to be erased, this is also known as the ‘right to be forgotten’. If you would like us to erase the personal information we hold about you, please contact us at privacy@allee-farms.co.uk or by writing to; Data Protection Officer, A. L. Lee Farming Company, Farm Office, Whitebridge Farm, Ely Road, Littleport, CB6 1RT. We will not be ably to comply with requests if we have a legal obligation to hold the data.

Right to Restrict Processing

Individuals have the right to block or suppress processing of personal data. If you would like us restrict processing of the personal data we hold about you, please contact us at privacy@allee-farms.co.uk or by writing to; Data Protection Officer, A. L. Lee Farming Company, Farm Office, Whitebridge Farm, Ely Road, Littleport, CB6 1RT.

Right to Data Portability

Individuals have the right to obtain and reuse their own personal data for their own purposes across different services.  If you would like us to provide you with your personal data, please contact us at privacy@allee-farms.co.uk or by writing to; Data Protection Officer, A. L. Lee Farming Company, Farm Office, Whitebridge Farm, Ely Road, Littleport, CB6 1RT. This right only applies to personal data that you have provided to us as the data controller and the basis for processing is Consent or Performance of a Contract.

Right to Object

Individuals have the right to object to processing of their personal data. If you wish to object, please contact us at privacy@allee-farms.co.uk or by writing to; Data Protection Officer, A. L. Lee Farming Company, Farm Office, Whitebridge Farm, Ely Road, Littleport, CB6 1RT

Right to Withdraw Consent

Individuals have the right to withdraw their consent at any time. You can at any time tell us not to send you marketing communications by email by clicking on the unsubscribe link within the marketing emails you receive from us or by contacting us at privacy@allee-farms.co.uk or by writing to; Data Protection Officer, A. L. Lee Farming Company, Farm Office, Whitebridge Farm, Ely Road, Littleport, CB6 1RT.

Right to Make a Complaint

Individuals have the right to make a complaint to a supervisory body which in the UK is the Information Commissioner’s Office. In the first instance we would ask you to contact us and allow us to investigate and identify any issues you may have, by contacting us at privacy@allee-farms.co.uk or by writing to; Data Protection Officer, A. L. Lee Farming Company, Farm Office, Whitebridge Farm, Ely Road, Littleport, CB6 1RT. The ICO can be contacted through this link: https://ico.org.uk/concerns.

In order to ensure privacy and security, we will take reasonable steps to verify your identity before granting you access to your personal data.

We will make reasonable attempts to promptly investigate, comply with, or otherwise respond to your requests as may be required by applicable law.

Depending upon the circumstances and the request, the Company may not be permitted to provide access to personal data or otherwise fully comply with your request; for example, where producing your information may reveal the identity of someone else. Data subjects have the right to know from the data controller as to whether or not personal data concerning them is being processed, where and for what purpose free of charge. However, we reserve the right to charge an appropriate fee for complying with your request where allowed by applicable law should the request be deemed repetitive or excessive. We also  reserve the right to deny your requests where, in the Company’s discretion, they may be unfounded, excessive, or otherwise unacceptable under applicable law.

Links to Other Websites

Our website may, from time to time, include links to the websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. We recommend that you check the privacy policies of these websites before  submitting personal information on them.

Contact

If you have any comments or questions relating to this privacy policy,  please contact us at: privacy@allee-farms.co.uk or by writing to Data Protection Officer, A. L. Lee Farming Company, Farm Office, Whitebridge Farm, Ely Road, Littleport, CB6 1RT.

Changes to our Privacy Policy

We may change this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.