FIS360 Privacy Notice provides a framework of understanding about the personal data that is collected by FIS360, 11 Riverview, The Embankment Business Park, Vale Road, Heaton Mersey, Stockport, Cheshire, SK4 3GN (as applicable, hereinafter each separately and/or jointly called the “Data Controller”). Personal data collected by the Data Controller will be controlled and processed in accordance with the terms of this Privacy Notice.
This Privacy Notice describes the types of personal data or personal information we collect, how we use the information, how we process and protect the information we collect, for how long we store it, with whom we share it, to whom we transfer it and the rights that individuals can exercise regarding our use of their personal data. We also describe how you can contact us about our privacy practices and to exercise your rights. In general, our privacy practices conform with law and regulation, including where applicable the provisions of the European Union’s General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
We may collect personal data about you in a variety of ways, such as through our website and social media channels; at events; through phone and fax; through enquiries by email in connection with our interactions with clients. We may collect a selection of personal data dependant on the nature of the relationship, including, but not limited to:
In addition to these we may also collect certain pieces of sensitive information if applicable to the role. We will only take this information with prior consent and it will be used only for the purpose it is taken.
The Data Controller collects and uses the data gathered for the following purposes:
All processing will be carried out based on adequate legal grounds which may fall into several categories, including:
We also may use the information in other ways for which we provide specific notice at or prior to the time of collection.
When you visit our website, we may collect certain information by automated means, such as cookies, web beacons and web server log. The information we may collect in this manner includes IP address, unique device identifier, browser characteristics, device characteristics, operating system, language preferences, referring URLs, information on actions taken on the site, dates and times of visits to our site and other usage statistics.
A “cookie” is a file that websites send to a visitor’s computer or other Internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser.
A “web beacon” also known as an Internet tag, pixel tag or clear GIF, links web pages to web servers and their cookies and is used to transmit information collected through cookies back to a web server.
Through these automated collection methods, we may obtain “clickstream data,” which is a log of the links and other content on which a visitor clicks while browsing a website.
As you click through our website, a record of the action may be collected and stored. We link certain data elements we have collected through automated means, such as your browser information, with other information we have obtained about you to let us know, for example, whether you have opened an email we sent to you. Your browser may tell you how to be notified when you receive certain types of cookies or how to restrict or disable certain types of cookies. Your browser will allow you to block cookies, however, you may not be able to use all the features of our Sites without cookies.
Providers of third-party apps, tools, widgets and plug-ins on our website, such as social media sharing tools, also may use automated means to collect information regarding your interactions with these features. This information is collected directly by the providers of the features and is subject to the privacy policies or notices of these providers. FIS360 is not responsible for these providers’ information practices.
To the extent required by applicable law, we will obtain your consent before collecting information using cookies or similar automated means.
We use information collected through cookies, web beacons, pixels, web server logs and other automated means for purposes such as;
For your convenience and information, our website may provide links to third-party sites, apps and services that may be operated by companies not affiliated with us. These companies may have their own privacy notices or policies, which we strongly suggest you review. We are not responsible for the privacy practices of any non-FIS360 sites, apps or services.
The Data Controller may process personal data for certain legitimate business purposes, which includes some or all of the following:
Whenever we process data for these purposes, we will ensure that we keep your rights in high regard and take account of these rights. You have the right to object to such processing and may do so by contacting us as described below. Please bear in mind that if you exercise your right to object, this may affect our ability to carry out and deliver services to you for your benefit.
We process the personal data we collect, also by automated means, for the purposes defined above and for a specific period, which complies with our internal retention policy, in order to ensure that the personal data are not kept longer than necessary.
We maintain administrative, technical and physical safeguards designed to protect the personal data you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. In order to ensure adequate security and confidentiality of the personal data, we may apply the following security measures as appropriate:
We store in our systems the personal data we collect in a way that allows the identification of the data subjects for no longer than it is necessary in light of the purposes for which the data was collected, or for which that data is further processed.
We determine this specific period by considering:
We do not disclose personal data that we collect about you, except as described in this Privacy Notice or in separate notices provided in connection with activities. We may share personal data with vendors who perform services on our behalf based on our instructions. We do not authorize these vendors to use or disclose the information except as necessary to perform services on our behalf or comply with legal requirements.
In addition, we may disclose personal data about you (i) if we are required to do so by law or legal process; (ii) to law enforcement authorities or other government officials based on a lawful disclosure request; and (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity. We also reserve the right to transfer personal data we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution or liquidation).
We also may transfer the personal data we collect about you to countries outside of the country in which the information originally was collected. Those countries may not have the same data protection laws as the country in which you initially provided the personal data. When we transfer your information to other countries, we will protect that data as described in this Privacy Notice and such transfers will be in compliance with applicable law.
The countries to which we may transfer the personal data we collect about you may be:
When we transfer personal data from within the European Union to countries or international organizations that are based outside the European Union the transfer takes place based on: –
When authorised by applicable law, a data subject may exercise certain specific rights, such as:
Whenever data processing is based on consent as described under Article 7 of the GDPR, the data subject may withdraw his or her consent at any time. If you require more information about the processing of your personal data, please refer to the How to Contact Us section below.
This Privacy Notice (including any addenda) may be updated periodically to reflect changes in our privacy practices and legal updates. For significant changes, we will notify you by posting a prominent notice on our website indicating at the top of each notice when it was most recently updated.