PROFESSIONAL CAR STORAGE SPECIALISTS

CARLINES PRIVACY POLICY

Carlines Secure Car Storage ("Carlines"/"we"/"us"/"our") respects an individual's right to privacy. This notice explains our approach to any Personal Information that we collect through our business dealings or obtain via our website. We will continue to review this notice at regular intervals and we reserve the right to make changes to this when it is deemed necessary.

In particular, this notice describes:

• Who we are;
• What Personal Information we collect;
• How we use Personal Information;
• On what basis we use Personal Information;
• How long we keep Personal Information;
• How we protect Personal Information;
• An individual's rights regarding their Personal Information;

"Personal Information" means any information or a set of information that identifies or is used by or on behalf of Carlines Secure Car Storage to identify an individual.

Who we are

Carlines is a vehicle storage provider and, unless otherwise stated, Carlines will be the data controller as regards Personal Information collected or obtained via our business dealings.

If you have any questions, you can contact us at info@carlines.co.uk and we will direct you to our Data Privacy Officer.

What Personal Information we collect

We may collect Personal Information from individuals in the course of our business, when we are contacted or when information is requested from us, when individuals apply for job vacancies, when enquiries are made or when our services are engaged. Sometimes Personal Information is not sought by us but is delivered or sent to us without prior request.

The Personal Information that we process includes:

• Personal contact details such as name, title, addresses, telephone numbers, email addresses;
• Information provided for the purposes of engaging our services; such as vehicle details and related documents;
• CVs and related reference information;
• Financial information, such as payment related information;
• Any other information relating to individuals which they may provide to us.

How we use Personal Information

We only use Personal Information when the law allows us to do so. Most commonly, we will use Personal Information in the following circumstances:

• To provide the services for which we have entered into agreement with the relevant individual;
• Where we need to comply with a legal and regulatory obligation; and
• Where it is necessary for our legitimate interests (or those of a third party such as our clients).

The types of personal data that we process depends on the relevant circumstances.

Where necessary, or for the reasons set out in this notice, Personal Information may also be shared with regulatory authorities, courts, tribunals, government agencies and law enforcement agencies. While it is unlikely, we may be required to disclose Personal Information to comply with legal or regulatory requirements we will use reasonable endeavours to notify the individual before we do this, unless we are legally restricted from doing so.

How long we keep Personal Information

Personal Information will be retained for no longer than is necessary for the purposes for which the personal data is processed. Personal data may be stored for longer periods insofar as the data will be processed solely for archiving purposes in the public interest, or scientific, historical, or statistical purposes in accordance with Art.89(1) and subject to the implementation of appropriate safeguards.

How we protect Personal Information

A key principle of data protection legislation is that Personal Information must be dealt with securely by means of "appropriate technical and organisational measures". This involves considering matters such as risk analysis, organisational policies, and physical and technical measures, all of which contribute to ensuring the confidentiality, integrity and availability of systems and processes. Carlines Secure Car Storage processes and stores data in line with GDPR guidelines to ensure the security of your Personal Information.

An individual's rights regarding their Personal Information

The European Union's General Data Protection Regulation provides certain rights for individuals. An individual is entitled to request details of the information we hold about them and how we process it. They may also have a right to have Personal Information rectified or deleted; to restrict, object or withdraw consent to our processing of that information, to stop unauthorised transfers of Personal Information to a third party and, in some circumstances, to have Personal Information relating to them transferred to another organisation. Such individual may also have the right to lodge a complaint in relation to our processing of Personal Information with a local supervisory authority.

If an individual objects to the processing of their Personal Information, or withdraws their consent to processing after having initially provided it, we will respect that choice in accordance with our legal obligations but it is likely this will make it impractical for us to deal in business with the relevant individual.