COYA General Privacy Policy
General Data Protection Regulation (GDPR)
Privacy Notice for external use
We issue this privacy notice in the interests of transparency over how we use (“process”) the personal data that we collect from our Customers, suppliers and third parties (“you”).
Personal data for these purposes means any information relating to an identified or identifiable person.
“Sensitive personal data” means personal data consisting of information as to –
- a) The racial or ethnic origin of the individual,
- b) Their political opinions,
- c) Their religious or philosophical beliefs,
- d) Their membership of a trade union,
- e) Their physical or mental health or condition,
- f) Their sexual life,
- g) The commission or alleged commission by them of any offence,
- h) Any proceedings for any offence committed or alleged to have been committed by them, the disposal of such proceedings or the sentence of any court in such proceedings,
- i) Genetic data; and
- j) Biometric data where processed to uniquely identify a person (for example a photo in an electronic passport)
Data Controller
For data protection purposes the “data controller” means the person or organisation who determines the purposes for which and the manner in which any personal data are processed.
The data controller is COYA London 118 Piccadilly London W1J 7NW
The Administrator for the data controller is Juliette Shelton who can be contacted by email on Juliette@COYArestaurant.com
What personal data is collected?
We will collect, store and use the following categories of personal data about you:
GDPR EXTERNAL DATA PRIVACY NOTICE
COYA Restaurants Ltd trading as COYA.
COYA Mayfair Registration No: 7824813, COYA Angel Court Registration No: 10075697– GDPR External data privacy notice – issue 1 –24.05.2018
- Personal contact details such as name, title.
- If provided personal email address and personal mobile phone numbers.
- CCTV footage and other information obtained through electronic means such as computerised records.
For you we do not collect, store and use sensitive personal data.
How data is collected from you.
Your personal details are collected through direct communications “(Telephone, email)” with you or your company.
We do not collect data through targeting technologies “(Website)”. However if you email us through the website we may retain information from this email.
Purpose of processing the data
It is necessary for us to process this personal data for the following reasons:
- We will need the information in order to carry out Contracted works
- We will need to maintain that information for the general purposes of the ongoing relationship including health and safety of our individuals on your premises.
Some examples of the specific situations in which we will use your personal data are: contact you regarding projects that you are carrying out, contact you to maintain the contract i.e. to inform you of start dates operatives details, health and safety paperwork and discuss the account. The purchasing of supplies.
Our legal basis for processing personal data of our customers, suppliers and third parties is that:
- Processing the personal data is necessary for the purpose of carrying out the contract.
- Processing is necessary to comply with a legal obligation (for example we are obliged under contract law to keep information for 12 years)
- Processing the data is necessary for the purposes of our “legitimate interests” as the data controller (except where such interests are overridden by the interests, rights or freedoms of the individual).
Our “legitimate interests” for these purposes are:
- The need to process data on customers, suppliers and third parties for the purposes of carrying out the contract;
- The need to gather data on customers for the purposes safeguarding the health and safety of our individuals;
- The need to process personal data for the purposes of entering into contract with the customer, supplier and third party.
Recipients of personal data
Your personal data may be received by the following categories of people:
- Our Sales and marketing team;
- Contracts Manager;
- Finance team;
- Any individual authorised by us to maintain your files;
- Our professional advisers;
- Appropriate external regulators and authorities (such as HSE)
A small amount of your personal data “(Name, Mobile number, signature)” maybe uploaded on to our online platform or booking system and will be accessible by our operatives and you, where requested. This is for the purposes of contact details for our operatives and daily work records where requested.
We do not envisage that your data would be transferred to a country outside the EEA. If we perceive the need to do that we would discuss that with you and explain the legal basis for the transfer of the data at that stage.
Contacter : Coya Paris
Les champs marqués avec une étoile (*) sont obligatoires!