Privacy Notice

Privia Security Ltd. — PRIVACY NOTICE
This Privacy Notice has been prepared by Privia security Ltd. (“Company”) to inform the Company’s customers regarding the processing of their personal data by the Company in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
For further information about how your personal data is processed within the scope of this Privacy Notice, please refer to the Personal Data Protection and Processing Policy available at www.priviasecurity.co.uk or priviahub.com.
a) Methods of Collecting Personal Data and Lawful Bases
Your personal data is collected through electronic or physical means. Personal data collected on the lawful bases set out in this Privacy Notice may be processed and shared in accordance with the conditions for processing under Articles 6 and 9 of the UK GDPR, which include:
• Consent — you have given clear consent for processing your personal data for a specific purpose.
• Contract — processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract.
• Legal obligation — processing is necessary for the Company to comply with a legal obligation.
• Legitimate interests — processing is necessary for the Company’s legitimate interests, provided those interests are not overridden by your rights and freedoms.
b) Purposes of Processing Personal Data
Your personal data is processed for the purposes of: planning and implementing the activities required for customising the products and services offered by the Company in accordance with your preferences, usage habits and needs, and recommending and introducing them to you; carrying out the work required by the relevant business units to enable you to benefit from the products and services offered by the Company and executing the related business processes; carrying out the work required to fulfil the commercial activities conducted by the Company and executing the related business processes; planning and implementing the Company’s commercial and/or business strategies; and ensuring the legal, technical and commercial-business security of the Company and relevant persons in a business relationship with the Company.
c) Parties with Whom Personal Data May Be Shared and Purposes of Sharing
Your personal data may be shared, within the framework of the processing conditions and purposes set out in Articles 6, 9 and 44–49 of the UK GDPR, with the Company’s business partners and suppliers, legally authorised public bodies, and legally authorised private entities, for the purposes of: planning and implementing activities to customise, recommend and introduce the Company’s products and services to you; carrying out the work required to enable you to benefit from the products and services offered by the Company; fulfilling the Company’s commercial activities; planning and implementing the Company’s commercial and/or business strategies; and ensuring the legal, technical and commercial-business security of the Company and relevant persons.
Where personal data is transferred outside the United Kingdom, such transfers shall only take place where an adequacy decision is in place, or appropriate safeguards (such as Standard Contractual Clauses) have been implemented in accordance with Articles 44–49 of the UK GDPR.
d) Your Rights and How to Exercise Them
In the event that you submit a request regarding your rights set out below to the Company through the methods described in the Privia Security Personal Data Protection and Processing Policy at www.priviasecurity.co.uk or priviahub.com, your request will be addressed as soon as possible and in any case within one month of receipt, in accordance with Article 12 of the UK GDPR.
Under the UK GDPR, you have the following rights:
• Right of access (Art. 15) — to obtain confirmation of whether your personal data is being processed and to request a copy of it,
• Right to rectification (Art. 16) — to request correction of inaccurate or incomplete personal data,
• Right to erasure (Art. 17) — to request deletion of your personal data where there is no longer a lawful basis for processing,
• Right to restriction of processing (Art. 18) — to request that processing of your personal data be restricted in certain circumstances,
• Right to data portability (Art. 20) — to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller,
• Right to object (Art. 21) — to object to processing based on legitimate interests or for direct marketing purposes,
• Rights related to automated decision-making (Art. 22) — to not be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects,
• Right to lodge a complaint — to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe your data has been processed unlawfully.
For information: [email protected]
Data Controller: Privia Security Ltd.
Supervisory Authority: Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF