The General Data Protection Regulations 2018 (GDPR) places legal responsibilities on organisations who collect and use personal information and gives individuals certain rights of access. The GDPR covers information that is structured, including data processed automatically by computer and information, which is recorded as part of a relevant filing system.
In the course of carrying out its business, Venters Solicitors needs to collect and use certain types of information about people such as, employees, clients and suppliers and is subject to the GDPR. This policy document sets out Venters Solicitors' intentions to fulfil its obligations under the GDPR and the arrangements it has put in place to comply with it.
Venters Solicitors is committed to ensuring that all staff comply with the GDPR. The Practice Manager is responsible for compliance by Venters Solicitors with the Act, assisted by the Partnership. Any queries or Subject Access Requests should be sent to firstname.lastname@example.org.
Whilst we would normally advise you of any disclosure, there may be situations that legally restricts us from doing this.
Venters Solicitors will:
Venters Solicitors will ensure that individuals' can exercise their rights described in the GDPR, including the right of subject access request to personal information; the right to prevent processing personal information in certain circumstances, including a right to rectify, block, erase or destroy information.
The GDPR provides the right for individuals to be told by Venters Solicitors
Venters Solicitors will supply this information providing the request is in writing; sufficient information is given by the applicant to enable Venters Solicitors to locate the information requested; Venters Solicitors will respond to such requests within 1 month of receipt of the request.
Venters Solicitors will provide the information in a permanent format that is understandable to the applicant.
The Practice Manager will coordinate subject access requests.
Venters Solicitors will comply with the rights of individuals. For example, Venters Solicitors will not use personal information for marketing purposes where the person has not provided consent to do so.
Venters Solicitors will comply with their responsibility to erase an individual's data after the retention period if requested.
To ensure that the details we hold for you are correct, please ensure that you advise us of any changes to your information as soon as possible.
Any complaints about the way in which the Venters Solicitors deals with personal information will be dealt with by the Practice Manager who will arrange for the matter to be investigated. If the complainant is dissatisfied with the outcome of the investigation by the Practice Manager, they may complain directly to the Compliance Officer for Legal Practice ('COLP'), Andrea Dawkins. Appeals against the decision of the COLP can be made to the Information Commissions Office.
Tel: 01625 524510
Omniweb is a Registered Data Keeper with the UK's ICO (Information Commissioner's Office). This is the highest UK Government authority on Data Protection. Omniweb is also certified under the UK Government Cyber Essentials Plus programme for Cyber Security.