ELISSA DA COSTA-WALDMAN

 

Privacy Notice

I want you to know that when you use me you can trust me with your information. I am determined to do nothing that would infringe your rights or undermine your trust. This Privacy Notice describes the information I collect about you, how it is used and shared, and your rights regarding it.

 

Data Controller

I am registered with the Information Commissioner’s Office (ICO) as a Data Controller for the personal data that I hold and process. My registered address is New Court, Temple, London EC4Y 9BE, my registration number is Z46009449, and my Data Protection Officer can be contacted at 0203 582 7123 and pbloomfield@newcourtchambers.com

 

Data Collection

All the information that I hold about you is provided to me by you when you seek to use my services. I will tell you why I need the information and how I will use it.

 

My Lawful Basis for processing your information

 

The General Data Protection Regulation (GDPR) requires all organisations that process personal data to have a Lawful Basis for doing so. The Lawful Bases identified in the GDPR are:

·      Consent of the data subject (you)

·      Performance of a contract to which you, the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract

·      Compliance with a legal obligation

·      To protect the vital interests of a data subject or another person

·      Performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

·      The legitimate interests of ourselves, or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject.

 

Examples of legitimate interests include:

• Where the data subject is a client, member, pupil, student, employee or otherwise in the service of the controller;
• Transmission within a group of undertakings for internal administrative purposes;
• Processing necessary to ensure network and information security, including preventing unauthorised access;
• Processing for direct marketing purposes, or to prevent fraud; and
• Reporting possible criminal acts or threats to public security.

 

My Lawful Basis is you consent and my Legitimate Interest is that you are either a client, member, pupil, student, employee or otherwise in the service of the controller.

I use your information to:

•  Process or support payments for goods and services;

•  Investigate and address your concerns;
• Communicate with you about services, studies, news, updates and events;

 

Where any part of our processing includes automated decision-making, I ensure that the proposed decisions are revealed to you before being applied. You will always be able to get an explanation for the decision and to challenge it if you are unhappy with it.

 

I collect and process both personal data and special categories of personal data as defined in the GDPR. This includes:

 

Client/Member/pupil/student data

• Name;
• Email;
• Phone number;
• Address;
• Payment or bank details;
• Date of birth;

• Location details;
• Family & next of kin details

 

Employee Data

• Name;
• Email;
• Phone number;
• Address;
• Payment or bank details;
• Date of birth;
• Location details
• Family & next-of-kin details
• Medical information

I may share your personal data with:

• My legal advisors in the event of a dispute or other legal matter;
• Law enforcement officials, government authorities, or other third parties to meet our legal obligations;
• In connection with, or during negotiations of, any merger, consolidation or restructuring, financing, refinancing, of chambers
• Any other party where I ask you and you consent to the sharing.

 

Transfers to third countries and international organisations

 

I do not transfer any information outside of the EEA.

 

I retain your personal data while you remain a client, member, pupil, student, employee, unless you ask me to delete it.  My Retention and Disposal Policy (copy available on request) details how long I hold data for and how I dispose of it when it no longer needs to be held. I will delete or anonymise your information at your request unless:

• There is an unresolved issue, such as a claim or dispute;
• I are legally required to; or
• There are overriding legitimate business interests, including but not limited to fraud prevention and protecting service users’ safety and security.

 

Your Rights

The General Data Protection Regulation gives you specific rights regarding your personal data. For example, you have to be informed about the information I hold and what I use it for, you can ask for a copy of the personal information I hold about you, you can ask me to correct any inaccuracies in the personal data I hold, you can ask me to stop sending you direct mail, or emails, or in some circumstances ask me to stop processing your details. Finally, if I do something irregular or improper with your personal data you can seek compensation for any distress you are caused or loss you have incurred. You can find out more information from the ICO’s Ibsite http://ico.org.uk/for_the_public/personal_information and this is the organisation that you can complain to if you are unhappy with how I deal with you.

Accessing and Correcting Your Information

You may request access to, correction of, or a copy of your information by contacting me at edwaldman@newcourtchambers.com

 

Marketing Opt-Outs

You may opt out of receiving emails and other messages from me by following the instructions in those messages.

 

I will occasionally update our Privacy Notice. When I make significant changes, I will notify you of these through either mail or email. I will also publish the updated Notice on chambers’ website.

 

---

 

Data Protection Policy available on request.