Privacy Policy
Griffiths Graphics Ltd and The Rolling Project
Privacy Notice - 01.04.2022
1. In providing us with your personal information you hereby
acknowledge that Griffiths Graphics Ltd and The Rolling Project is
the Data Controller for all the personal information you provide (for
the purpose of the UK General Data Protection Regulation (UK
GDPR) and the Data Protection Act 2018 (DPA)).
​
2. The personal data which we collect from you will be used by the
Company (pursuant to it carrying out its various business
functions) for the following purposes:
For the administration and provision of Graphic design and
photography.
​
3. As a Data Controller the Company is required under GDPR to
inform you which of the Article 6 GDPR “Data Processing
Conditions” it is relying upon to lawfully process your personal
data. In this respect please be advised that in regards to the data
provided by you we are relying on the following two Article 6
conditions;
i. “The data processing is necessary for compliance with a legal
obligation to which the controller is subject”. (Article 6(1)(c) UK
GDPR).
ii. “The data processing is necessary for the performance of a
task carried out in the public interest or in the exercise of
official authority vested in the controller.” (Article 6(1)(e) UK
GDPR).
4. We may share your personal data securely with third parties (i.e.
persons/bodies/entities outside the Company) in accordance with
data sharing arrangements which we have in place with those third
parties
​
5. The personal information collected from you will be held by the
Company for a period of 7 years after you last receive the service.
​
6. Please note that we are required to collect certain personal data
under statutory requirements and in such cases a failure by you to
provide that information to us may result in the company being
unable to provide you with a service and/or could render you liable
to legal proceedings.
​
7. We would inform you that under Article 21 UK GDPR you have the
right at any time to object to the company about the fact that we
are processing your personal data for the purposes of carrying out
a task.
​
8. The company will not transfer any of your personal data outside of
the European Economic Area or other country with an adequacy
decision. All processing of your personal data by us will be carried
out in the United Kingdom, European Economic Area or other
country with an adequacy decision.
​
9. The company will not use your personal data for the purposes of
automated decision making.
​
10. Please be advised that under UK GDPR individuals are given the
following rights in regards to their personal data:
i. The right of access to their personal data held by a data
controller.
ii. The right to have inaccurate data corrected by a data
controller.
iii. The right to have their data erased (in certain limited
circumstances).
iv. The right to restrict the processing of their data by a data
controller (in certain limited circumstances).
v. The right to object to their data being used for direct
marketing.
​
vi. The right to data portability (i.e. electronic transfer of data to
another data controller).
Further information on all the above rights may be obtained from
the Information Commissioner’s website: www.ico.org.uk.
11. In the event that you have any queries regarding our use of your
personal data, you wish to have access to the same or you wish to
make any complaint regarding the processing of your personal
data please contact the Council’s Data Protection Officer at
Griffiths Graphics Ltd, Bro Mebyd, Llangyndeyrn, Kidwelly SA17
5BN.
​
12. Please be advised that in the event that you make a request or a
complaint to the company’s Data Protection Officer (see 11 above)
and you are dissatisfied with the company’s response you are
entitled to complain directly to the Information Commissioner’s
Office. Details of the Commissioner’s Office contact details and
further information on your rights may be obtained from the
Commissioner’s website – www.ico.org.uk.