Legal

1. General

1.1  TDM Group Limited (“we”, “us” or “TDM”) take the privacy of your information very seriously. Our Privacy Notice is designed to tell you about our practices regarding the collection, use and disclosure of personal information which may be provided to us or collected in person, through online forms or our website, by email, correspondence or telephone communications.

1.2  This notice applies to personal information provided by our customers and their authorised users and affiliated individuals. In this notice “you” refers to any individual whose personal data we hold or process (i.e to you as an individual user, customer, or potential customer, or to you as an individual affiliated with one of our users, customers, or potential customers). This includes any other individuals who are not customers or potential customers but have visited or are users of our website.

1.3  In general, our services are limited to the provision of IT services and we do not process personal data on a large scale, but we will hold certain data in relation to individual users and customers and individuals affiliated with our users or customers; this notice sets out the basis on which we hold that data.

1.4  This notice is governed by the EU General Data Protection Regulation (the “GDPR”) from 25 May 2018.

1.5  Specifically in relation to personal data obtained through telephone communications (as mentioned above), we record such telephone communications and calls for training and monitoring purposes or otherwise because you are a client of ours and we deem it reasonably necessary, in the performance of our contract with you, to record and keep a record of such calls (for instance in relation to the support services we provide to you).

1.6  Please refer to our separate Cookies Policy for information about our practices regarding the use of cookies when you visit our website. Our Cookies Policy can be viewed here.

 

2. Legal Basis on which we process personal data

2.1 Personal data we hold about you will be processed either because:

2.1.1  the processing is necessary in order for us to comply with our obligations under a contract between you and us, specifically for the provision of our services; or

2.1.2  the processing is necessary in pursuit of a “legitimate interest”; a legitimate interest in this context means a valid interest we have or a third party has in processing your personal data which is not overridden by your interests in data privacy and security; or

2.1.3  you have consented to the processing for the specific purposes described in this notice;

 

3. Personal data we collect

3.1 We may collect and process the following personal data (information that can be uniquely identified with you) about you:

3.1.1  for individuals associated with our customers we may hold contact information such as names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation (“Customer Contact Information”);

3.1.2  for individuals associated with our suppliers and other third parties we interact with we may hold contact information such as names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation (“Third Party Contact Information”);

3.1.3  a record of any correspondence or communication between you and us and any information we may require from you when you report a problem or submit a complaint (“Communication Information”);

3.1.4  marketing information we may hold about you in order to provide information about our services this may include names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation (“Marketing Information”).

3.2 We will collect information either from you directly or from a third party (for instance your employer or an introducer). If we do obtain your personal data from a third party your privacy rights under this notice are not affected and you are still able to exercise the rights contained within this notice.

3.3 You do not have to supply any personal information to us but in practice we may be unable to provide our services to you without personal data (for instance we will need contact information in order to communicate with you). You may withdraw our authority to process your personal data (or request that we restrict our processing) at any time but there are circumstances in which we may need to continue to process personal data (please see below).

 

4. How we process your personal data

4.1 Please see the table below, which sets out the manner in which we will process the different types of personal data we hold:

Purpose/ActivityType of dataLawful basis for processing including basis of legitimate interest
When we are setting up an account with a customer or potential customer with whom you are associated or entering into an agreement to provide services to our customer.Customer Contact Information

Communication Information

Performance of a contract with you

Necessary for our legitimate interests (to establish necessary information about you in order to provide our services)

When we communicate with you as an individual affiliated with our, customers, or potential customers in order to provide our services to you.Customer Contact Information

Communication Information

Performance of a contract with you

Necessary for our legitimate interests (in order to deliver our services).

When we enter into an agreement with you or an organisation with which you are connected as a supplier.Third Party Contact Information

Communication Information.

Performance of a contract with you