As at 22 May 2023

DEFINITION
The aim of this GDPR Policy is to state clearly how N Display Ltd controls, holds and processes data in line with the requirements of The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) which the European Parliament, The Council of the European Union and the European Commission aims to strengthen and unify data protection for all individuals within the European Union.
N Display Ltd will ensure that it follows the principles contained within the GDPR when dealing with sensitive and personal information/data.

RESPONSIBILITY FOR DATA PRIVACY
N Display Ltd does not require the appointment of a Data Protection Officer as we are not a ‘public authority’. Responsibility for the GDPR Policy within the business is held by ‘Kellie O Mahony’ Director.

DATA DEFINITIONS
Personal Data – This is the data that can identify a person, such as: name, date of birth, photo, National Insurance No. PAYE Information, home address, home phone number, mobile phone number, email addresses, contract of employment, passport, Right to Work Information, CV, references, bank details, medical information, records of holidays, sickness and other absence etc. Sensitive Data – This is information that relates to medical records, religion etc.

EMPLOYEE DATA
How Employee Data will be used – As an employer, N Display Ltd needs to keep and process information about its employees for normal employment purposes. The information we hold is used for management and administrative purposes only and to enable the business to run and manage its relationships with its employees effectively, lawfully and appropriately, during the recruitment process, whilst employed, at the time when employment ends and after leaving. This includes using information to enable us to comply with its employment contract and to comply with any legal requirements and pursue its legitimate interests. It may sometimes be necessary to process employee data to pursue legitimate business interests, for example to prevent fraud, for administrative purposes or in reporting potential crimes. N Display Ltd will never process employee data where these interests are overridden by your own interests.
Employees might inevitably be referred to in many company documents and records that are produced by the employee and/or and their colleagues while carrying out their duties and the business of the company. Where necessary we may keep information relating to employees’ health, which could include reasons for absence and GP/Occupational Health reports and notes.
This information will be used to comply with the N Display Ltd Health and Safety and Occupational Health Obligations, to consider how employee health affects their ability to do their job and whether any adjustments to that job might be appropriate. N Display Ltd also needs this data to administer and manage statutory and company sick pay.
Employee personal data will be stored for a period of 6 years following employment end, after which it will be securely destroyed. If N Display Ltd intends to process employee personal or sensitive data for a purpose other than that which it was collected the employee will be provided with information on that purpose and any other relevant information.
Sharing Data with Third Parties – N Display Ltd will only disclose information about employees to third parties if legally obliged to do so or if it needs to comply with its contractual duties to its employees, for instance, if it is required to pass on certain information to an external payroll provider, pension provider or health insurance schemes.

CUSTOMER DATA
How Customer Data will be used – N Display Ltd needs to keep and process information about its customers for business and contact purposes. The information held and processed will be used for service provision and administrative purposes only and to enable us to run the business and manage its relationships with our customers effectively, lawfully and appropriately.

INFORMATION WE MAY COLLECT
To be able to order from us we have to collect certain information from you, as part of this you will be required to give your full contact information, we will use this information provided by you to enable us to provide the service requested from us and in the way set out in this privacy policy.

Email addresses – This is to keep you informed as to the progress of your order, sending digital proofs, delivery tracking, invoices etc.
IP addresses – when you visit our website we will automatically receive your IP address, this is a unique identifier for your computer or other access device.
Cookies – A cookie is a small piece of software information that automatically gets placed on your computer. N Display Ltd use cookies to enhance your browsing experience and to keep track of the pages you have visited which enables us to build a profile of how users navigate our website which in turn help us to improve it. Most internet browsers i.e. ‘Google’, ’Chrome’ Firefox,  Internet Explorer etc. allow you to turn off cookies, to find out exactly how check your help menu.

SHARING DATA WITH THIRD PARTIES
N Display Ltd may be required to share customer data (limited to contact and location details) with third party processors (such as courier companies), will not share customer data with any third-party processor for any purpose other than for legitimate business interests.

THE RIGHTS OF THE INDIVIDUAL
Under the General Data Protection Regulation (GDPR) and The Data Protection Act 2018 (DPA) all individuals have a number of rights with regard to their personal data. All individuals have the right to request from the Company access to and rectification or erasure of personal data, the right to restrict processing, object to processing as well as in certain circumstances the right to data portability.

DATA SUBJECT ACCESS REQUESTS (DSAR)
Individuals are allowed access to their personal data. N Display Ltd will provide a copy of this information free of charge, however, if requests are considered to be manifestly unfounded, excessive or repetitive we may consider charging the individual a reasonable fee.

A Data Subject Access Request DSAR must be made to the Director who will respond within one month of receiving this DSAR. Should a request be complex or numerous N Display Ltd will reserve the right to extend this period to a further two months. Individuals have the right to lodge a complaint to the Information Commissioners’ Office if they believe that N Display Ltd has not complied with the requirements of the GDPR or the Data Protection Act 2018 with regard to their data.

THE RIGHT OF ERASURE
The right of erasure does not mean to provide the individual with a “right to be forgotten”.
Individuals can request their personal data to be erased or to prevent processing in the following circumstances:

– Where data is no longer necessary in relation to the purpose for which it was originally collected/processed.
– When the individual withdraws consent (applies only to data where consent is required for processing).
– Where there is no legitimate interest for continuing the processing.
– If the data was unlawfully processed.
– To comply with a legal obligation.

DATA SECURITY
N Display Ltd takes the security of its data seriously, all processing and storage of data is subject to suitable security precautions relevant to the type and use of that data. We protect the privacy of your information using highly secure, password-protected servers. The online and offline security measures we adopt protect information we have against unauthorised or unlawful processing of personal data, and against accidental loss or destruction of or damage to personal data.

DATA BREACHES
The investigation and reporting of Data Breaches are the responsibility of the Data Privacy Committee and will be reported to the Information Commissioners Office in accordance with the reporting requirements of GDPR and the Data Protection Act 2018.