Privacy

Privacy Notice

PRIVACY NOTICE

Scope

All data subjects whose personal data is collected, in line with the requirements of the GDPR.

Responsibilities

The Finance Manager is responsible for ensuring that this notice is made available to data subjects prior to Michaels Wholesale Foods Ltd collecting/processing their personal data.
All Employees/Staff of Michaels Wholesale Foods Ltd who interact with data subjects are responsible for ensuring that this notice is drawn to the data subject’s attention and their consent to the processing of their data is secured.

Privacy notice

Who are we?

We are a standalone wholesaler with a proven track record, known in the trade for nearly thirty years as Michaels Wholefoods. We are based in East Kent and specialise in hand packed dried fruits, nuts, pulses, rice and other foods. We are certified by the Organic Farmers and Growers to pack organic products and provide all required segregation and traceability in house. We are also a producer of a wide range of mueslis, granolas and snack mixes. We also offer a bespoke labelling service to advertise our customers businesses and also deliver to our customers on our own fleet of vehicles.

Our data protection representatives, Gavin Fagg can be contacted using the contact us option on the company website;

can be contacted using the contact us option on the company website;

michaelswholefoods.co.uk
(01843) 604601

Right of access – you have the right to request a copy of the information that we hold about you.
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
Right of portability – you have the right to have the data we hold about you transferred to another organisation.
Right to object – you have the right to object to certain types of processing such as direct marketing.
Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
Right to judicial review: in the event that Michaels Wholesale Foods Ltd refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined in clause 3.6 below.

All of the above requests will be forwarded on should there be a third party involved (as stated in 3.4 above) in the processing of your personal data.

Read more about how and why we use your data here www.michaelswholefoods.co.uk

Document Owner and Approval

The Finance Manager is the owner of this document and is responsible for ensuring that this policy document is reviewed in line with the review requirements stated above.

This policy was approved by the Board of Directors on 15^th May 2018 and is issued on a version controlled basis under the signature of the Managing Director (MD).

Signature: Date:

Change History Record

Issue	Description of Change	Approval	Date of Issue
1	Initial issue	Owen Day	15/05/2018

Privacy Policy

PRIVACY POLICY

Scope

All processing of personal data by Michaels Wholesale Foods Ltd is within the scope of this procedure.

Responsibilities

The Finance Manager is responsible for ensuring that the privacy notice(s) is correct and that mechanisms exist such as having the Privacy Notice(s) on Michaels Wholesale Foods Ltd website to make all data subjects aware of the contents of this notice prior to Michaels Wholesale Foods Ltd commencing collection of their data.
All staff that are required to collect personal data are trained to follow this procedure.

Procedure Article 12

Michaels Wholesale Foods Ltd identifies the legal basis for processing personal data before any processing operations take place by clearly establishing, defining and documenting:
- the specific purpose of processing the personal data and the legal basis to process the data under:
  - consent obtained from the data subject;
  - performance of a contract where the data subject is a party;
  - legal obligation that Michaels Wholesale Foods Ltd is required to meet;
  - protect the vital interests of the data subject, including the protection of rights and freedoms;
  - official authority of Michaels Wholesale Foods Ltd or to carry out the processing that is in the public interest;
  - necessary for the legitimate interests of the data controller or third party, unless the processing is overridden by the vital interests, including rights and freedoms;
  - National law.
- any special categories of personal data processed and the legal basis to process the data under:
  - explicit consent obtained from the data subject;
  - necessary for employment rights or obligations;
  - protect the vital interests of the data subject, including the protection of rights and freedoms;
  - necessary for the legitimate activities with appropriate safeguards;
  - personal data made public by the data subject;
  - legal claims;
  - substantial public interest;
  - preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, provision of health or social care treatment, or management of health and social care systems and services, under the basis that appropriate contracts with health professionals and safeguards are in place;
  - public health, ensuring appropriate safeguards are in place for the protection of rights and freedoms of the data subject, or professional secrecy;
  - National laws in terms of processing genetic, biometric or health data.

Michaels Wholesale Foods Ltd records this information in line with its data asset register.

Privacy notices
- When personal data collected from data subject with consent
  - Michaels Wholesale Foods Ltd is transparent in its processing of personal data and provides the data subject with the following:
    - Michaels Wholesale Foods Ltd identity, and contact details of the Data Protection Officer / GDPR Owner and any data protection representatives;
    - The purpose(s), including legal basis, for the intended processing of personal data (clause 4.2 below);
    - Where relevant, Michaels Wholesale Foods Ltd legitimate interests that provide the legal basis for the processing;
    - Potential recipients of personal data;
    - Any information regarding the intention to disclose personal data to third parties and whether it is transferred outside the EU. In such circumstances, Michaels Wholesale Foods Ltd will provide information on the safeguards in place and how the data subject can also obtain a copy of these safeguards;
    - Any information on website technologies used to collect personal data about the data subject;
    - Any other information required to demonstrate that the processing is fair and transparent.
  - All information provided to the data subject is in an easily accessible format (PDF), using clear and plain language, especially for personal data addressed to a child.
  - Michaels Wholesale Foods Ltd facilitates the data subject’s rights in line with the data protection policy and the subject access request procedure.
- When data is contractually required for processing
  - Michaels Wholesale Foods Ltd processes data without consent in order to fulfill contractual obligations such as postal address, bank details for the provision of goods and services..
  - Privacy notice for this personal data processing can be found on the company website michaelswholefoods.co.uk
- When personal data has been obtained from a source other than the data subject
  - Michaels Wholesale Foods Ltd makes clear the types of information collected as well as the source of the personal data (publicly accessible sources) and provides the data subject with:
    - Michaels Wholesale Foods Ltd (data controller) identity, and contact details of the Data Protection Officer / GDPR Owner and any data protection representatives;
    - The purpose(s), including legal basis, for the intended processing of personal data;
    - Categories of personal data;
    - Potential recipients of personal data;
    - Any information regarding disclosing personal data to third parties and whether it is transferred outside the EU – Michaels Wholesale Foods Ltd will provide information on the safeguards in place and how the data subject can also obtain a copy of these safeguards;
    - Any other information required to demonstrate that the processing is fair and transparent.

Michaels Wholesale Foods Ltd provides the information stated in clauses 3 and 4 above within:
- One month of obtaining the personal data, in accordance with the specific circumstances of the processing;
- At the first instance of communicating in circumstances where the personal data is used to communicate with the data subject;
- When personal data is first disclosed in circumstances where the personal data is disclosed to another recipient.

Clauses 3 and 4 above do not apply:
- If the data subject already has the information;
- If the provision of the above information proves impossible or would involve an excessive effort;
- If obtaining or disclosure of personal data is expressly identified by Member State law; or
- If personal data must remain confidential subject to an obligation of professional secrecy regulated by Member State law, including a statutory obligation of secrecy.

Document owner and approver

The Finance Manager is the owner of this document and is responsible for ensuring that this procedure is reviewed in line with the review requirements of the GDPR.

This procedure was approved by the Managing Director (MD) on 15^th May 2018 and is issued on a version controlled basis under his/her signature

Signature: Date:

Change history

Issue	Description of Change	Approval	Date of Issue
1	Initial issue	Owen Day	15/05/18