Danny Sullivan Group will comply with data protection law and follow good practice in order to protect the rights of staff, customers and partners.
We aim to be open about how we store and process individuals’ data. We also look to protect ourselves from any data breach.
The Data Protection Act 1998 and the General Data Protection Regulation 2016 describes how organisations, including Danny Sullivan Group must collect, handle and store personal information. These rules apply regardless of whether data is stored electronically, on paper or on other materials. To comply with the law, personal information must be collected and used fairly, stored safely and not disclosed unlawfully.
Under GDPR, all personal data obtained and held by us must be processed according to a set of core principles. In accordance with these principles, we will ensure that:
- processing will be fair, lawful and transparent
- data be collected for specific, explicit, and legitimate purposes
- data will be kept accurate and up to date. Data which is found to be inaccurate will be rectified or erased without delay
- data is not kept for longer than is necessary for its given purpose
- data will be processed in a manner that ensures appropriate security of personal data including protection against unauthorised or unlawful processing, accidental loss, destruction or damage by using appropriate technical or organisation measures
- we will comply with the relevant GDPR procedures for international transferring of personal data
Timothy O’Sullivan | Managing Director