From 25 May 2018 the General Data Protection Regulation (GDPR) came into force. The GDPR’s focus is the protection of personal data, i.e. data about individuals.
We (Galashiels Storage Limited) as a Data Controller are committed to protecting the data we hold about you, our customers. As a tenant of Galashiels Storage, we will hold the following information about you: –
Provided by you: –
• other contact details e.g. telephone numbers, email addresses
• the contract you have signed
• emails, iMessage’s, texts etc between us in relation to the contract
Collated during your time as a customer: –
• records of all payments you have made
Your name and address may be shared with Scottish Borders Council (SBC) only if you are renting a container which is a separate entry on the SBC valuation roll. Ask us if you are not clear if your container is one of those.
We do not keep your information any longer than is necessary. The above information is held for six years plus the current financial year after the end of the contract; we will dispose of records safely after this period has elapsed.
If you are required to provide your bank details for any refund of rent, we will not keep these details after we make the payment to you unless there is reason to believe we will require them again in which case, we will inform you of this.
We do not sell personal information nor pass personal information to third parties, except where we need to do so to meet legal obligations, for example with our auditors or HMRC, Scottish Borders council (Non-Domestic rates team).
You, our customer have the following rights: –
Information – you have the right to clear information about how we collect and use your personal information – this protocol.
Access – you have the right to request a copy of the personal information we hold about you and to be provided with details of any third parties or categories of third parties that have accessed it.
Correction – you have the right to ask for any personal information that is inaccurate or incomplete to be corrected.
Erasure – you have the right to ask for your personal data to be deleted under certain circumstances.
Objection – you have the right to object to our use of your personal information under certain circumstances.
Restriction – if you make an objection, our use of your personal information may be temporarily suspended whilst we deal with your request.
Portability – you have the right to ask for a copy of your personal information in a machine-readable format to pass to another organisation under certain circumstances.