At Vitaccess, we are committed to protecting your privacy. This policy applies when we are acting as a controller of personal data, i.e. where we have determined the purposes and means of the processing of that personal data. It also applies where are acting as a processor of data on behalf of the data controller.
Customer and Supplier Employees
We will process your personal data for the purposes of communication with our customers and suppliers, ensuring any products or services exchanged between us satisfy agreed requirements and maintaining records. The legal basis for this processing is that it is necessary to achieve our legitimate interest, namely the supply of our products and services and maintaining a business relationship with your employer. We will retain all personal data we have obtained relating to you to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting or reporting requirements. We will share your personal data with customers and suppliers only to the extent that the disclosure is reasonably necessary for the purposes of the supply of our products/services and maintaining a business relationship with you or your employer.
Where we are seeking to establish a business relationship, we will process your personal data for the purpose of communication with your employer. The legal basis for this processing is that it is necessary to achieve our legitimate interest, namely providing information on our products and services that may be of value and establishing a business relationship with your employer. We will retain all personal data we have obtained relating to you to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting or reporting requirements. We will share your personal data with our suppliers only to the extent that the disclosure is reasonably necessary for the purposes of seeking to establish a business relationship with your employer and enhancing the relevance of any communications we have with you and / or your employer.
We may process your personal data for the purpose of creating marketing material. The legal basis for this processing is that it is necessary to achieve our legitimate interests, namely promoting products and services supplied by us. We will store your personal data relating to marketing material for as long as the marketing material remains relevant to products and services supplied by us. We will share your personal data with other third parties.
We will process your personal data for recruitment purposes. The legal basis for this processing is that it is necessary to achieve our legitimate interest, namely the recruiting of personnel to ensure the continued provision of our products and services. We will share your personal data with third parties, such as recruitment advisors, only to the extent that the disclosure is reasonably necessary for the recruitment process.
Consent for Processing of Personal Data
To ensure compliance with UK and International data protection legislation – for example UK Data Protection Act, European General Data Protection Regulation (‘GDPR’), and United States Health Insurance Portability and Accountability Act (‘HIPAA’) – specific consent may be requested from you for specific projects. Where consent in needed / given from you, we will ensure that you are fully aware of all data processing activities (including the storage, retention, and sharing of personal data) prior to commencing processing of your personal data. Please contact us using the email address below if you have any queries relating to consent, including how to ask to withdraw your consent.
Website users – IP address lookup and Cookie use
Our company uses third parties to provide information about visitors to our websites. When you visit our website, we will record your IP address. This address will be matched against public and proprietary IP address databases to provide us with information about your visit. This information may identify the organisation to whom the IP address is registered but not individuals. In some limited cases i.e. single person companies, it may be possible to identify personal data from publicly available ICANN data.
Cookies allow us to provide important site functionality, so you don’t have to re-enter lots of information. They also allow us to remember what links and pages have been clicked or viewed during a session. If you have provided us with personal data, completing a contact form for example, we may associate this personal data with other information. This will allow us to identify and record what is most relevant to you.
Your personal data may be processed outside the European Economic Area (EEA) by us or the third parties we use. Where these transfers take place, we will ensure the same high standard of protection for your personal data at all times.
How Long We Retain Your Data
Vitaccess only retains personal information for as long as is necessary. For further details on our data retention periods please contact us.
Where you have consented to us to use your details for direct marketing, we will keep this data until you notify us or otherwise withdraw your consent.
Links to Other Web Sites
Our services may contain links to other websites not controlled or operated by Vitaccess. These links do not imply that we endorse these third-party sites. We recommend reviewing those sites directly for information on their privacy and cookie policies.
We do not knowingly collect Personal Data through this website from children under the age of 13. If you are under the age of 13, please do not submit any Personal Data through this site.
As you are providing us with your personal data, it is important to us that you are aware of the following rights that you have in relation to our processing of that personal data.
- You can be provided with a copy of any personal data concerning you that we process, unless that would affect the rights and freedoms of others. You can also be provided with information on how that personal data is processed by us.
- You can have us rectify any personal data of yours that we hold that is inaccurate or incomplete. In certain circumstances, you can also ask us to erase or restrict the use of any of your personal data that we process.
- You can object at any time to our processing of your personal data on grounds related to your particular situation.
- You can object at any time to our processing of your personal data for direct marketing purposes.
You can exercise any of the rights listed above by contacting us using the details at the bottom of this policy. If you are unhappy with any aspect of how we processed your personal data or your request to exercise a right, you can lodge a complaint with the Information Commissioner’s Office.
Changes to this Policy
Vitaccess is incorporated and registered in England and Wales with company number 10642948 and whose registered office is at The Oxford Science Park, Magdalen Centre, Robert Robinson Avenue, Oxford OX4 4GA.
We are contactable by email at firstname.lastname@example.org. To ensure your data is protected, if we receive a request from you to exercise your rights, we will ask you to verify your identity before acting on the request.