Rye Street Bishops Stortford Ltd and subsidiaries have business relationships with its suppliers. In order to conduct the business operations between ourselves and our suppliers we need to share personal information relating to our employees and our supplier's employees. This document is designed to explain what information we share, how we use and handle that information and your employees' rights to that information.
What personal data do we hold?
We currently hold four categories of personal information about your employees:
-
1.
Name
-
2.
Business email address
-
3.
Business telephone number
-
4.
Mobile phone number
Where did we get your data from?
-
•
Your company have provided us with this information when you became a supplier to Rye Street.
What is our purpose for holding your personal information?
-
•
The lawful basis for sharing personal information is that we have a legitimate interest as a client of your company to communicate with your employees to facilitate our business relationship and operations
What we do with your personal information
-
•
We use your employee details so that we can communicate with you by email or phone in relation to the goods and services you provide.
-
•
In certain circumstances, this information may be shared with our mutual clients.
How do we protect your employees' information?
-
•
Rye Street comply with the current Data Protection regulation for Personal data, the GDPR.
-
•
Our staff are made aware and trained to treat personal data securely.
-
•
Your employee Personal data is processed in a manner that ensures appropriate security and confidentiality of the personal data, including preventing unauthorised access to or use of personal data and the equipment used for the processing. Rye Street have implemented appropriate technical and organisational security measures to ensure a level of security appropriate to the risk.
What we don't do with your personal information
-
•
We do not use any automated systems relating to your employees' personal data
-
•
We do not use your information for profiling your employees
-
•
We do not transfer your employee information outside of the EU.
How long do we keep your personal data?
-
•
Your employee Personal Data will be retained by Rye Street for as long as our client / supplier relationship remains in place.
-
•
You must inform us if our contacts with your company change, so that we can delete the email addresses for employees that are no longer employed by your company.
-
•
Historic emails between our companies will be retained to facilitate an audit trial of the operations and transactions between us.
What are your employees' personal data rights?
If at any point your employees believe that the personal information we hold is incorrect, or want us to correct or delete that information, or they no longer want us to hold that information, they can exercise their rights under the current Data Protection laws. These rights include:
-
•
Right of access
-
•
Right to rectification
-
•
Right to erasure
-
•
Right to restriction of processing
-
•
Right to data portability
-
•
Right to object
For more information about personal data rights please visit the Information Commissioner Office website at: https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/individuals-rights/
Who do employees contact if they have an issue with the personal information we hold?
To contact our Data Protection Officer, please email: dpo@ryestreet.co.uk
How do your employees make a complaint about how their personal data is being held or processed?
-
•
If they wish to raise a complaint on how we handle their personal data, they can contact our Data Protection Officer who will investigate the matter.
-
•
If they are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner's Office (ICO). Their Helpdesk number is 0303 123 1113.
What we need from you as a Supplier
Rye street need to ensure that our suppliers maintain the security of our employee Personal data that we share with them and that they comply with the current UK and EU Data Protection regulation. We therefore ask that all suppliers provide Rye Street with a reciprocal Privacy statement to explain how they manage and protect our employee information.