The Venture House Group Limited – GDPR Compliance Statement
Written Commitment:
We are committed to the principles inherent in GDPR and particularly to the concepts of privacy by design, the right to be forgotten, consent and a risk-based approach. In addition, we aim to ensure:
-
Transparent with the regard to the use of data
-
That and data processing is lawful, fair, transparent and necessary for a specific purpose
-
That data is accurate, kept up to date and removed when no longer necessary.
-
That data is kept safely and securely.
The Venture House Group Limited has always honoured its users’ rights to data privacy and protection. We’ve demonstrated our commitment to this by consistently exceeding industry standards. We do not need to collect and process users’ personal information beyond what is required for the functioning of our products, and this will never change.
Who We Are:
The Venture House Group Limited are:
-
Processors for our hosted client data
-
Controllers of our client and supplier contact information, required to; manage & deliver services under contract; manage customer requested & incidents.
-
Controllers for personal information in relation to The Venture House Group Limited company employees.
GDPR Compliance Plan:
The Venture House Group Limited have a consistent level of data protection and security across our organisation. How we do this:
-
Information Audit: We carry out a company-wide information audit to identify and assess what personal information we hold, where it comes from, how and why it is processed and if and to whom it is disclosed.
-
Policies & Procedures: revising and implementing new data protection policies and procedures to meet the requirements and standards of GDPR and any relevant data protection laws, including:
-
Data Protection: our main policy and procedure document for data protection have been overhauled to meet the standards and requirements of GDPR. Accountability and governance measures are in place to ensure that we understand and adequately disseminate and evidence our obligations and responsibilities; with a dedicated focus on privacy by design and the rights of individuals.
-
Data Retention & Erasure: Our retention policy and schedule are put in place to ensure that we meet the ‘data minimisation’ and ‘storage limitation’ principles and that personal information is stored, archived and destroyed compliantly and ethically. We have dedicated erasure procedures in place to meet the new ‘Right to Erasure’ obligation and are aware of when this and other data subject’s rights apply; along with any exemptions, response timeframes and notification responsibilities.
-
Information Security & Technical and Organisational Measures:
The Venture House Group Limited takes the privacy and security of individuals and their personal information very seriously and are taking every reasonable measure and precaution to protect and secure the personal data that we process. We have dedicated information security policies and procedures in place to protect personal information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures, including (in no particular order):
-
Hardware Firewalls
-
Software Firewalls
-
Web Application Firewalls
-
Anti-Virus
-
Remote and Local Security Scanning
-
Data Encryption
-
Password protection
-
Denial of Service Protection
Data Subject Rights:
In addition to the policies and procedures mentioned above that ensure individuals can enforce their data protection rights, we provide easy to access information in the office of an individual’s right to access any personal information that The Venture House Group Limited processed about them and to request information about:
-
What personal data we hold about them
-
The purposes of the processing
-
The categories of personal data concerned
-
The recipients to whom the personal data has/will be disclosed
-
How long we intend to store your personal data for
-
If we did not collect the data directly from them, information about the source
-
The right to have incomplete or inaccurate data about them corrected or completed and the process for requesting this
-
The right to request the erasure of personal data (where applicable) or to restrict processing in accordance with data protection laws, as well as to object to any direct marketing from us and to be informed about any automated decision-making that we use
-
The right to lodge a complain or seek judicial remedy and who to contact in such instances.
Contact Us:
Should you require any further information regarding our GDPR compliance, please feel free to contact us using the below details:
The Venture House Group Limited
Harrogate Business Centre
Hookstone Avenue
Harrogate
HG2 8ER
Phone Number: 01423 876 305
E-mail: info@venturehousegroup.co.uk