1. OVERVIEW
This section of the Data Protection Statement covers those business contacts including suppliers, consultants, customers and business partners (collectively, “Business Contacts”) that provide goods or services to the King’s Inn relating to the carrying out of its functions.
2. HOW DO WE COLLECT PERSONAL DATA?
We will only ever source Personal Data relating to Business Contacts in a way that would be generally expected. We receive Personal Data about Business Contacts from a variety of sources, as follows:
• the Personal Data is often provided by the Business Contact as part of the relationship;
• the Personal Data may be collected from public sources;
• the Personal Data may be collected indirectly from another person within the company of the Business Contact;
• the Personal Data may be collected through our website;
• the Personal Data may be collected indirectly from a website or from a third party.
3. CATEGORIES OF BUSINESS CONTACT PERSONAL DATA
The table below sets out the general categories of Personal Data that we collect in relation to Business Contacts:
4. OUR PROCESSING ACTIVITIES – BUSINESS CONTACTS
The table below sets out the purpose for which we collect your Personal Data, our lawful basis for doing so, and the Personal Data that we collect.
In limited circumstance we may need to use your Personal Data for purposes other than those stated when we collected the Personal Data. Should this happen we will notify you of this new purpose.
5. RETENTION OF BUSINESS CONTACT PERSONAL DATA
We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal or reporting requirements. This means that the period of time for which we store your Personal Data may depend on the type of data we hold. To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.
The table below outlines a general summary of our retention periods:
We may retain certain Personal Data beyond the periods specified herein in some circumstances such as where required for the purposes of legal claims. We may also delete Personal Data earlier than the specified Retention Period where the Personal Data is no longer required for the purpose.