Insight Data Ltd holds data about businesses operating in the glass and glazing industry, the construction and building industry, and architects.
This data is stored in a database and used to compile reports and analysis about the industry and is supplied to selected third parties such as industry bodies and authorities, media companies who publish trade journals/magazines, industry exhibition organisers, and organisations who may wish to send you marketing communications about products and services that are relevant to you in your professional capacity.
If you are a decision-maker in one of these businesses we may process a minimal amount of your personal data.
Insight Data Ltd is committed to ensuring that your privacy is protected in accordance with the law. We take privacy and your rights as an individual seriously and if you want to object please follow the correct procedures in place below.
1. The Data Controller
Insight Data Ltd is the data controller. Insight Data Ltd is based at 502 Worle Park Way, Weston-Super-Mare, BS22 6WA and is contactable via telephone (01934 808 293) or via email at (firstname.lastname@example.org). Alex Tremlett has been given the responsibility to ensure your rights as an individual are respected and clear. If you have any queries, please do not hesitate to contact us.
2. Processing of Personal Data
We only process the minimal amount of personal data which can be considered low risk in accordance with a Data Protection Impact Assessment (DPIA) and a Legitimate Interest Assessment (LIA) we have carried out.
The personal data we hold may include your name, job title, business email address, and business telephone number.
3. How we collect your Personal Data
The primary method for collecting data is by telephoning your business. One of our researchers will call and speak to either yourself or a colleague during normal office hours to confirm your business information and personal data relating to your business. We may also send you an email to confirm your personal data is correct. We aim to contact you every 4 – 6 months to confirm the details we hold are still accurate.
4. Data sourced from publicly available sources and/or third-party data vendors
We may use publicly available information such as your website or media sources. We also use a credit reference agency that provides directors and shareholders of limited companies and owners/partners of non-limited companies when available. Before adding the names to our database, we still call and confirm the information is correct following our standard research procedures.
5. The purpose of collecting personal data
The personal data we hold about you is used by us and third parties to ensure that marketing and other communications are sent to the most appropriate individuals within a business listed on our database.
We will only supply your personal data to third parties where we are satisfied that the products and services they supply are relevant to you in your professional capacity and they have a legitimate interest in sending you marketing communications.
6. How long do we hold personal data?
You will be contacted by telephone or email typically every 4 – 6 months to confirm with you or a colleague that the personal data we hold is accurate and that you are still a decision-maker in the business. If we cannot confirm this with you or a colleague, our researchers are trained to make an informed decision by using third-party methods such as online research.
If after 12 months we have been unable to confirm your personal data is accurate, your personal data will be removed from our database.
7. The legal basis for processing personal data
Legitimate interest is the legal basis we rely on to process your personal data. After undertaking a DPIA (Data Protection Impact Assessment) and an LIA (Legitimate Interest Assessment) we concluded that Legitimate Interest would be the most transparent and beneficial legal basis to rely on for the personal data we process.
8. Why we rely on Legitimate Interest
Given the practicality of how we collect your business and personal information, on occasions, we may confirm this via a colleague or partner of yours. Having weighed up your rights as an individual and your potential needs and gains from receiving specific, industry-related marketing communications we have determined that Legitimate Interest is the most suitable legal basis for processing your personal data.
Should you object to this process please refer to point 15 (your rights as an individual).
9. Appropriate safeguards to ensure personal data is kept secure
The protection of your data is important to Insight Data Ltd. We understand the potential distress and concern which may occur if your personal data is misused.
Data is stored in a database environment with strictly controlled access via a web browser with SSL (Secure Socket Layer) protection and encrypted passwords, with daily encrypted back-ups. The servers that hold data are maintained and patched regularly against threats.
Data can be exported from our database as a CSV file, typically to enable the information to be used in mailing lists. Strict licensing terms and conditions govern how third parties may use data and organisations are required to delete files immediately after use.
10. Is any data stored or handled outside of the EEA (European Economic Area)?
No, your personal and business data is stored within the EU.
11. Special categories of personal data
We do not process personal data relating to children or special categories defined by the GDPR. The only personal data we collect is your name, job title, business email address, business telephone number and your address if your business operates from your home. This makes the personal data we hold fall into a low-risk category.
12. Sharing of personal data
Insight Data Ltd provides business data to third parties for the purpose of industry research and marketing communications. The data we provide includes information about your business activities and may include a minimal amount of personal data including your name, job title, business email address, and business telephone number.
Personal data is supplied for the purpose of identifying the most appropriate individuals in an organisation to receive marketing communications about products and services that are relevant to you in your professional capacity within your business. These third parties can include;
We may also need to disclose information to authorities or professionals for legal reasons or in the case of a dispute.
13. Profiling of personal data
Insight Data does not use your data for data profiling or automated decision-making.
We only use the personal data we hold for the purpose of identifying the most appropriate individuals in an organisation to receive marketing and other communications.
15. Your rights as an individual
It is important that you understand what your rights are as an individual.
The personal data processed by Insight Data Ltd is used solely for the purpose of identifying the most appropriate individual within a business on our database to receive marketing and other communications.
16. Registering a complaint
If at any point you feel we are being unfair or dismissing your rights as an individual please contact us and let us know. If you are still not satisfied, you can make a complaint to a supervisory authority, in this case, being the ICO. To make a complaint please visit the ICO website here; https://ico.org.uk/
17. Contacting Insight Data
If you have any queries regarding how your data is held, processed, or shared including activating your right to erasure please contact Alex Tremlett, Insight Data Ltd, 502 Worle Park Way, Weston-Super-Mare, BS22 6WA or via telephone (01934 808 293) or via email at (email@example.com).