EMB Group Website Privacy Notice
EMB-Group Limited (company number 07087597)(EMB Group) is the data controller. EMB Group’s registered address is 5 Merus Court, Meridian Business Park, Leicester, LE19 1RJ.
EMB Group is committed to being transparent about how it collects and uses personal data and to meeting its data protection obligations.
EMB Group’s Data Protection Lead can be contacted at: email@example.com
We need to collect personal data in order to maintain records and in order to communicate with you or your organisation about the services that we provide to you or your organisation.
The personal data that we normally collect includes your name, job title, address and contact details, including email address and telephone number. For certain projects or contracts that we deliver, we may be required to collect other data, including sensitive personal data. Where this is the case, we will explain the purpose and lawful basis for processing your sensitive personal data before requesting the data.
The purposes for which we may process your personal data are:
Personal data may be processed by EMB Group under a number of lawful bases:
Your information may be shared internally, including with EMB Group staff and managers and IT staff if access to the data is necessary for performance of their roles.
Your data may also be shared with third parties who provide certain business functions or process data on behalf of EMB Group and its clients or where there is a legal or contractual requirement for EMB Group to do so. EMB Group does not permit data processors acting on its behalf to use the data for any other purpose.
EMB Group takes the security of your data seriously. The organisation has internal policies and controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by authorised employees in the performance of their duties. The EMB Group of companies holds ISO27001:2013 information security certification as well as Cyber Essentials Plus certification.
Where EMB Group engages third parties to process personal data on its behalf, those third parties do so on the basis of written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.
EMB Group will not transfer your data to countries outside the European Economic Area.
EMB Group’s Data Retention Policy requires personal data to be deleted or securely destroyed when it is no longer required for the purpose for which it was originally obtained.
EMB Group normally holds data for seven years after performance, except where we are under contractual obligations to retain the personal data for longer periods.
Where we are using your details for direct marketing, EMB Group will keep such data until you notify us to delete the data or withdraw your consent.
Data held by EMB Group is securely destroyed at the end of the retention period in accordance with our information security policies.
Failure to provide the required personal data may mean that EMB Group is unable to provide you with services.
EMB Group does not use automated decision-making.
As a data subject, you have a number of rights. You can:
If you would like to exercise any of these rights, please contact EMB Group’s Data Privacy Manager by e-mail at: firstname.lastname@example.org
If you believe that EMB Group has not complied with your data protection rights, you can complain to the Information Commissioner’s Office: https://ico.org.uk/concerns/handling/