3 King’s Bench Walk North
London EC4Y 7HR
1EC is a data controller in respect of personal data collected:
a. in the course of the management of chambers (for example, assessment of staff, information about suppliers and marketing activities such as compiling marketing lists or sending out our newsletter;
b. when dealing with applications for tenancy, pupillage and mini-pupillage;
c. when processing applications for employment of a potential member of staff; and
d. for internal record keeping, such as when compiling equality and diversity data.
Personal data will be used and retained for such purposes.
The Lawful Basis for Processing Personal Data
In some cases the subject of the personal data will have given consent to the processing of his or her personal data. Where explicit consent has not been given, personal data will be processed only when:
a. it is necessary for the performance of a contract with the person whose personal data is processed (or prior to entering such contract, in order to take steps at the request of the person whose personal data is processed);
b. processing is necessary for compliance with a legal obligation to which 1EC is subject; or when
c. it is necessary for the management of chambers, or for one of the purposes identified above.
Special Categories of Personal Data
It may be necessary to process personal data which constitute particularly sensitive special categories, ie personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
Such data will only be processed where the subject of such personal data has given explicit consent, or where processing is necessary for the purposes of employment, social security and social protection law.
Retention Periods for Personal Data
Personal data relating to employees will not be retained after a period of one year from the date the employee left employment.
Personal data relating to unsuccessful applicants for employment, or pupillages or mini-pupillages will not be retained after a period of one year from the date the application is determined.
Personal data relating to suppliers will not be retained after a period of one year from the date that any commercial relationship ceases with that supplier.
Where personal data is required in the course of the management of chambers, such personal data will not be retained after a period of one year from the date that it ceases to be relevant to any management activity.
Where personal data is required for internal record keeping, such as compiling equality and diversity data, such personal data will not be retained after a period of one year from the date that it ceases to convey any useful information.
All the above retention periods will be kept under review.
If your personal data has been processed or held, you have a right to request access to (and rectification or erasure of) personal data; or to request restriction of processing concerning the data subject; or to object to processing; as well as the right to data portability. These rights may be limited where there is a legal requirement, or other legitimate grounds, to process your data.
If you wish to exercise these rights, please use the contact details above.
If you have unresolved concerns you also have the right to complain to the data protection authorities.