TNA Solicitors
Privacy and Transparency Notice
Data Controller – David Ashogbon , who is the data controller.
Purposes of Processing – Your data will be processed in order to:
- marketTNA Solicitors services to you;
- provideservices under contract to you and others;
- complywith regulatory and other legal obligations; and
- protectTNA Solicitors against potential claims.
Legal Basis – Your data will be processed on the basis that TNA Solicitors has a legitimate interest in
being able to achieve the aims of processing set out above. Where special category data is
provided, the provider of the data warrants that they consent to TNA Solicitors processing that data or
that they have obtained written consent from the data subject.
Personal Data Held – As a minimum, TNA Solicitors is required to positively identify its clients. This
also includes positively identifying a director in the case of a corporate client. In addition,
TNA Solicitors holds whatever information is provided to it by its clients and others. This will rarely
include special category data.
Failure to Provide Data – If you fail to provide TNA Solicitors with the data required you
will not receive services or marketing.
Data Sources – TNA Solicitors obtains most personal data from its clients and those who have
indicated that they have an interest in TNA Solicitors services. TNA Solicitors
also obtains some personal data from other correspondents. TNA Solicitors also collects some
data from publicly available sources (e.g. Companies House).
Recipients – Any data provided by a client is treated as confidential to that client and will only be
shared with others in so far as this is necessary in order to provide the services contracted for by
the client, to comply with regulatory and other legal obligations and to protect TNA Solicitors against a
potential claim. In order to provide its services, TNA Solicitors relies on the services of certain data
processors. These include secure cloud storage for files and emails. In each case, TNA Solicitors
ensures that data is processed in compliance with this policy.
Third Countries and Safeguards – Other than where required in order to provide services as
required in individual client matters, data is rarely sent to third countries. Where it is, the relevant
devices are password protected and equipped with tracking and remote wipe software. The
devices are personally accompanied.
Retention Period – Data is held for six years from the end of the relevant matter or for six years
where not associated with a particular matter.
Data Subject’s Rights – Where relevant, you have the right (subject to client confidentiality) to:
- withdrawconsent to the processing of your data; and when the data has been obtained you have the right to request the data be securely be destroyed or and returned to you securely, and we require that you sign for the returned data and the data will be securely passworded, with the password sent in a separate email or document.
Thereafter, the information will destroyed or returned timely not more than 14 days upon request.
- complainto the supervisory authority which is the Information Commisioners Office (ICO) regarding the processing of your data. The link with which such complain can be made is https://ico.org.uk/; and
- obtainacopy of the data held on you and to correct any error on the data as set-out in the widrawal above.
Additionally, these are your rights under the GDPR rule which we have also adapted and binding on us as a firm:
1 The right to be informed (Article 13 and 14)
You have the right to be informed about the collection and use of your personal data. A privacy notice will be provided to you at the time your personal data is collected and will explain simply and clearly how and why we intend to process your data. This information will be on the website or will accompany the form you complete.
2 The right of access (Article 15)
Individuals have the right to access their personal data. This is commonly referred to as subject access. Individuals can make a subject access request verbally or in writing. The CNC have one month to respond to a request and cannot charge a fee to deal with a request in most circumstances.
3 The right to rectification (Article 16)
You have a right to rectification of inaccurate personal information and to update incomplete personal information.
If you believe that any of the information that we hold about you is inaccurate, you have a right to request that we restrict the processing of that information and to rectify the inaccurate personal information.
Rectification can be achieved by adding to the record or creating a supplementary record. Even if we decide that the information is correct, we will place a statement from you on the record with the data you believe to be correct or stating your dispute.
4 The right to erasure (Article 17)
You may request that we delete your personal information if you believe that:
- we no longer need to process your information for the purposes for which it was provided
- we have requested your permission to process your personal information and
- you wish to withdraw your consent; or
- we are not using your information in a lawful manner
5 The right to restrict processing (Article 18)
You have a right to request to restrict the processing of your personal information. You may request to restrict processing your personal information if you believe that:
- any of the information that we hold about you is inaccurate
- we no longer need to process your information for the purposes for which it was provided, but you require the information to establish, exercise or defend legal claims
- we are not using your information in a lawful manner
6 The right to data portability (Article 20)
Where we have requested your permission to process your personal information, you have a right to receive the personal information you provided to us in a portable format.
You may also request to provide it directly to a third party, if technically feasible. We’re not responsible for any such third party’s use of your information, which will be governed by their agreement with you and any privacy statement they provide to you.
Please note that this right only applies to data that is being processed electronically.
7 The right to object (Article 21)
You must tell us your circumstances justifying your objection to processing. Please be aware that we can still process personal information where there are compelling grounds, or it is necessary for legal claims.
8 Rights in relation to automated decision making and profiling. (Article 22)
Automated Decision Making – None.