The following Data Privacy Notice (DPN) explains the circumstances in which Toothbrush Apartments will collect personal data from you, why it is being collected, how we will use it and to whom we might disclose it to if necessary.
Toothbrush Apartments is committed to complying with the UK’s Data Protection law and the EU General Data Protection Regulation (GDPR) for the protection of personal data, as well as the principles of data security in the configuration of our services. If you have any questions about this privacy notice including how we use your personal data, please contact us.
The Data We Collect
We will collect, store and use elements of your personal data. The processing of this personal data may be necessary for us in order to provide the products and services you have requested from us.
We may also monitor, record, store and use any telephone, email or other electronic communications with you so that we can check any instructions given to us and to improve the quality of our service.
Any personal data we collect from you will not be transferred outside the European Economic Area.
Direct Marketing Communications
If you have chosen to opt-in to our direct marketing communications, we will use your information to inform you of products and services available from us which may be of interest to you. You can opt-out by following the ‘unsubscribe’ instructions at the bottom of the communication or by contacting us directly.
Links to websites of third parties
Please note that this data privacy notice only applies to Toothbrush Apartments and we are not responsible for, and have no control over information that is submitted to or collected by third parties, such as those where our website may provide links and banner advertisements to third party sites. Since we do not control those websites, you are responsible for reviewing and abiding by the privacy policies of these third party sites to ensure they comply with the applicable data protection regulations.
How long will the data be stored?
We will store the data for a period of seven years for compliance with our general legal obligations and for the exercise or defence of any legal claims.
Under the GDPR, you have the right to ‘block’ or request the deletion or removal of personal data to prevent further processing. This right to erasure is also known as ‘the right to be forgotten’. Specific circumstances in which you can request the deletion or removal of personal data includes:
- where the personal data is no longer necessary for the purposes for which it is collected or otherwise processed,
- where you withdraw consent,
- when you object to the processing and there is no overriding legitimate interest for continuing the processing,
- where the personal data was unlawfully processed (i.e. otherwise in breach of the GDPR),
- where the personal data has to be erased in order to comply with a legal obligation,
- in case a deletion is not possible due to legal, statutory or contractual retention periods, or if it requires disproportionate efforts or prejudices your legitimate interests, the data will be blocked instead of deleted.
Sharing of data
We respect your privacy and the information we hold about you is confidential. We will only disclose this data when:
- you have given us your consent to do so,
- it is necessary for the performance of an agreement of which you will be made aware,
- in order to obtain professional advice (e.g. legal advice),
- we or others need to investigate or prevent crime (e.g. to fraud prevention agencies),
- the law permits or requires it, regulatory or governmental body requests or requires it, even without your consent, or there is a duty to the public to reveal the information.
In order to administer a contract on your behalf, we may need to share some of your personal information with other data controllers. This processing is necessary for the purposes of delivering specific services to you. You agree that we can share or use your personal data with any of our appointed agents or suppliers to allow us to provide you services and products you have asked us to provide you under this agreement.
If you give us false or inaccurate information and fraud (in any form) is identified, details will be passed to the fraud prevention agencies. We and other organisations may also share, access and use this information to prevent fraud and money laundering. In addition, law enforcement agencies may access and use this information.
Protecting your privacy
In order to protect the personal data collected from you against accidental or deliberate manipulation, loss, destruction or the access of unauthorised persons, technical and organisational security measures are constantly improved as part of our technological development. In addition, our employees, subcontractors and other support staff are obligated to observe confidentiality and data privacy.
Any access to your data that is stored by us only takes place through an encrypted connection. By using the most up-to-date firewall systems, we provide the best possible protection for your data.
Wherever possible, we have tried to create a secure and reliable website for our users. However, your use of our website is entirely at your own risk and we have no responsibility or liability for the security of personal information transmitted.
If at any time we become aware that your data has been compromised, or that a breach of our systems and controls has occurred, which has an impact on the security of your data, we will notify the Information Commissioner’s Office, and you, without undue delay.
Subject Access Requests
You have the right to request access to a copy of the personal information that we hold about you. This is also known as a ‘Subject Access Request’. This information is provided to you free of charge however, we can refuse to respond or charge a ‘reasonable fee’ when a request is manifestly unfounded, excessive or repetitive.
If you would like to submit a Subject Access Request, please contact us. We will respond to your request without delay and at the latest, within one month of receipt of your request.
Right to complain
If you have a complaint about any aspect of data protection or if you feel your privacy has been breached by us, please contact us.
Toothbrush Apartments reserves the right to change this data protection information at any time with effect for the future. The revised policy will be posted to this page so that you are always aware of the information we collect, how we use it and under what circumstances we disclose it. We therefore recommend you read the current data protection information again from time to time.