Personal data

Personal data means any information relating to an identifiable person.

The processing of personal data shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to BE3.

Contact details of the data controller

Data controller for the purposes of the General Data Protection Regulation (GDPR):

BE3

Grove House
1 Grove Place
Bedford
MK40 3JJ

Phone: 07796 261099
Email: Stuart.Metcalfe@be3uk.com
Website: https://www.be3uk.com

Collection of data

General data and information is collected when a user accesses the website. This general data and information are stored in the server log files. Collected may be the browser types and versions used, the operating system used, the website from which an accessing system reaches our website , the sub-websites, the date and time of access to the Internet site, an IP address, the Internet service provider of the accessing system, and any other similar data and information that may be used in the event of attacks on our information technology systems.

When using this general data and information, BE3 does not draw any conclusions about the user. The general data and information may be needed to deliver the content of our website correctly, optimise the content of our website, ensure the long-term viability of our systems, and provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber attack. The data of the server log files are stored separately from all personal data provided by a user.

If a user contacts BE3 by e-mail or via a website contact form, website sign-up form, or any other online form, the specific personal data transmitted by the user are automatically stored. Such personal data, laid out by what is requested in the form, is transmitted on a voluntary basis by a user to BE3 and is stored for the purpose of processing or contacting the user. There is no transfer of this personal data to third parties.

Consent

Where consent is required, it is a freely given indication of the user’s wishes by which they, by a specific clear affirmative action, agree to the processing of personal data relating to them.

Security of personal data

BE3 is committed to securing personal data by all means possible.

Rights of the user

a) Right of confirmation
Each user has the right to obtain from BE3 the confirmation as to whether or not personal data concerning them is being processed.

b) Right of access
Each user has the right to obtain from BE3 free information about their personal data stored at any time and a copy of this information. The GDPR grants the user access to the following specific information:

The purposes of the data processing
The categories of personal data processed
The recipients to whom the personal data has been or will be disclosed
The period for which the personal data will be stored and the criteria used to determine that period
The existence of the right to request from BE3 change or erasure of personal data, or restriction of processing of personal data concerning the user, or to object to such processing
The existence of the right to lodge a complaint with a supervisory authority
Where the personal data is not collected directly from the user, information pertaining to the source of the personal data
The existence of automated decision-making, including profiling, with information about the logic involved, as well as the significance of such processing for the user
Information as to whether personal data is transferred to a third country or to an international organisation and the safeguards relating to the transfer

c) Right to change
Each user has the right to obtain from BE3 the changing of inaccurate personal data concerning them. Taking into account the purposes of the processing, the user has the right to have incomplete personal data completed, if not already complete.

If a user wishes to exercise this right, they may, at any time, contact BE3.

d) Right to be forgotten
Each user has the right to erasure of personal data concerning them, and BE3 has the obligation to erase personal data where one of the following applies, as long as the processing is not necessary:

The personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed
The user withdraws consent to the processing and there are no overriding legitimate grounds for the processing
The user objects to the processing and there are no overriding legitimate grounds for the processing
The personal data has been unlawfully processed
The personal data must be erased for compliance with a legal obligation
If a user wishes to request the erasure of personal data stored, they may, at any time, contact BE3. BE3 will ensure that the erasure request is complied with.

Where BE3 has made personal data public and is obliged to erase the personal data, BE3 shall take reasonable steps to inform other controllers processing the personal data that the user has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required.

e) Right of restriction of processing
The user has the right to obtain from BE3 restriction of processing where one of the following applies:

The accuracy of the personal data is contested by the user, for a period enabling BE3 to verify the accuracy of the personal data
The processing is unlawful and the user opposes the erasure of the personal data and requests instead the restriction of their use instead
BE3 no longer needs the personal data for the purposes of the processing, but they are required by the user for the establishment, exercise or defence of legal claims
If one of the aforementioned conditions is met, and a user wishes to request the restriction of the processing of personal data stored by BE3, they may at any time
contact BE3. An employee of BE3 will arrange the restriction of the processing.

f) Right to data portability
The user has the right to transmit their stored personal data to another controller without hindrance from BE3, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in BE3.

Furthermore, the user has the right to have personal data transmitted directly from one controller to another, where technically feasible.

In order to assert the right to data portability, the user may at any time contact BE3.

g) Right to object
Each user has the right to object, at any time, to processing of personal data concerning them.

BE3 shall no longer process the personal data in the event of the objection, unless we can demonstrate legitimate grounds for the processing which override the interests of the user, or for the establishment, exercise or defence of legal claims.

If BE3 processes personal data for direct marketing purposes, the user has the right to object at any time to processing of personal data concerning them for such marketing. If the user objects to the processing for direct marketing purposes, BE3 will no longer process the personal data for these purposes.

In addition, the user has the right to object to processing of personal data concerning them by BE3 for scientific or historical research purposes, or for statistical purposes, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

In order to exercise the right to object, the user may contact BE3.

h) Right to withdraw data protection consent
Each user has the right to withdraw their consent to processing of their personal data at any time.

If the user wishes to exercise the right to withdraw consent, they may, at any time, contact BE3.

Legal basis for the processing

GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the user is party, the processing is based on GDPR guidelines.

Processing is necessary for the purposes of the legitimate interests pursued by BE3, except where such interests are overridden by the interests or fundamental rights and freedoms of the user which require protection of personal data.

Concerning the processing of data, in accordance with GDPR legislation, our legitimate interest is to carry out our business in favour of the well-being of all concerned.

Routine erasure of personal data

BE3 shall process and store the personal data of users only for the period necessary to achieve the purpose of processing or storage, or as long as other legislators in laws or regulations to which BE3 is subject to requires.

Existence of automated decision-making

We do not use automated decision-making or profiling. Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person.