O’HAGAN WARD & CO. LLP
This Privacy Notice (Notice) gives you information about the way we collect and use personal information about you (which is known as “personal data” under data protection legislation).
You have the right to object to us processing your personal data for direct marketing (which we do only with your consent) and also to processing which is carried out for the purposes of our legitimate interests. For more information, see the section “Your Rights” below.
NOTICE – CHANGE TO DATA PROTECTION LAW
The law in relation to data protection is changing with effect from 25th May 2018 when the General Data Protection Regulation (GDPR) commences.
You should read through this Privacy Notice to fully understand the basis upon which we collect your personal data, how we use it, where we store it and to whom it is disclosed.
Commitment to Privacy
We are committed to protecting your personal data and right to privacy. We will always keep your personal data safe and comply with applicable data protection legislation from time to time in place.
By law, you have a number of rights when it comes to your personal data. Further information and advice about your rights can be obtained from the data protection regulator in your country.
What does this mean?
- The right to be informed
You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we’re providing you with the information in this Notice.
- The right of access
You have the right to obtain access to your personal data (if we’re processing it), and certain other information (similar to that provided in this Privacy Notice).
This is so you’re aware and can check that we’re using your personal data in accordance with data protection law.
- The right to rectification
You are entitled to have your personal data corrected if it’s inaccurate or incomplete.
- The right to erasure
This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
- The right to restrict processing
You have rights to ‘block’ or suppress further use of your personal data. When processing is restricted, we can still store your personal data, but may not use it further. We keep lists of people who have asked for further use of their personal data to be ‘blocked’ to make sure the restriction is respected in future.
- The right to data portability
You have rights to obtain and reuse your personal data for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
- The right to object to processing
You have the right to object to processing for direct marketing (which we do only with your consent) and also to processing which is carried out for the purposes of our legitimate interests.
- The right to lodge a complaint
You have the right to lodge a complaint about the way we handle or process your personal data with your national Data Protection Regulator.
- The right to withdraw consent
If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for marketing purposes.
Please see the section titled Requests to us below, for more information on how we will handle your requests to us.
Who we are
References in this Notice to “we” or “us” are to O’Hagan Ward & Co. Solicitors. We are committed to protecting your privacy and are Data Controllers within the meaning of data protection laws applicable in the European Union (EU) and European Economic Area (EEA).
As Data Controllers, we have arrangements to ensure that we handle your personal data correctly and in accordance with data protection law. These arrangements reflect our responsibilities in relation to you.
For more information on these arrangements, feel free to contact us as set out under “Contacting Us” below.
What personal data do we collect about you?
We collect the personal data you provide to us as part of your instructions or enquiries of us. This personal data may include your name, address, place of residence, date of birth, PPSN, email addresses, land and mobile phone numbers and other contact details.
How we use your personal data
In addition, we use your personal data:
- to manage and improve our services to our clients;
- to analyse the effectiveness of our marketing and to help us provide more relevant offers, advice and information to you and our other guests;
- to build up a clearer picture of our clients as individuals and thereby provide you with a seamless, relevant and consistent service;
- to provide you with information about events, special offers, promotions and other relevant matters
(if you have given your consent for us to do so);
- to advertise our services on social media to other people who may also be interested in what we have to offer (if you have given your consent for us to do so);
- to ensure that the information we hold is kept accurate and up to date;
- to notify you about changes to our services.
How long we keep your personal data for
We will keep your personal data for as long as you continue to interact with us or as required by Law.
If you tell us, at any time, that you want us to delete your personal data from our records, we will do so in a timely manner
Who we share your personal data with
If you have given your consent for us to do so, to communicate with you on our behalf via email;
In some cases the personal data we collect from you may also be processed outside the European Economic Area (EEA) and such destinations may not have laws which protect your personal data to the same extent as in the EEA. We have obligations to ensure that your personal data processed by us or by our suppliers and partners operating outside the EEA is treated securely and is protected against unauthorised access, loss or destruction, unlawful processing and any processing which is inconsistent with the purposes set out in this Notice.
In addition, we may disclose your personal data:
- if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to protect the rights, property or safety of our business, our customers or others. This includes, in specific cases, exchanging information with other companies and organisations for the purposes of fraud protection; and
- to successors in title of all or part of our legal practice.
The legal basis for us using your personal data
- In certain circumstances, we process your personal data after obtaining your consent to do so for the purposes of:
- sending you marketing communications;
- In most cases, it is in our legitimate interests to collect and use the personal data referred to above (see What personal data do we collect about you? above) so that we can:
- provide you with a service that is as relevant, useful, professional and beneficial to you as possible, including by personalising our contact with you, making sure we tell you about all the offers that relate specifically to you and contacting you using your preferred method of communication; and
- better understand our client base so that we can improve our services and marketing activities (which could also benefit you).
When we rely on our legitimate interests in order to collect and use your personal data we must consider whether those legitimate interests are overridden by your interests or your fundamental rights and freedoms. We may continue only if we decide that your interests, rights and freedoms do not override our legitimate interests.
Where we have considered these matters, and where we think there is a risk that one of your interests or fundamental rights and freedoms may be affected we will not use your personal data unless there is another legal basis for us to do so (either that it is necessary for us to perform our contract with you, or on the basis of your consent).
How we contact you
We may, if we have your consent, contact you by post, e-mail, SMS text messages, telephone or other means including other electronic means and only using such contact details as you provide to us from time to time.
If you no longer wish to receive such or certain communications, you can let us know by contacting us using firstname.lastname@example.org .You may also update your preferred contact details at any time by emailing or telephoning us on 01-4965170.
Requests to us
We are required by law to act on requests and provide information free of charge, except where your requests are manifestly unfounded or excessive (in particular because of their repetitive nature) in which case we may charge a fee as provided for under the GDPR (taking into account the administrative costs of providing the information or communication, or taking the action requested), or refuse to act on the request.
Please consider your request responsibly before submitting it. We’ll respond as soon as we can. Generally this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we’ll come back to you and let you know.
If you need to contact us for any reason (including to exercise any of your rights in relation to data protection as set out above) please send us your request using email@example.com or by telephoning us on 01-4965170.