K10 VISION LIMITED PRIVACY NOTICE
In this notice references to “K10” mean K10 Vision Limited, “personal data” means any data that can be used to identify you or that K10 can link to you and which it has in its possession or control.
K10 is responsible for ensuring that it uses your personal data in compliance with data protection law. The purpose of this notice is to explain what personal data K10 collects and how it uses it. For the purposes of data protection law K10 is a data controller in respect of your personal data.
K10 employs high security standards maintaining a framework of policies, procedures and training covering data protection, confidentiality and security and regularly reviews the appropriateness of the measures it has in place to keep the data it holds secure.
Collection of personal data
K10’s policy is to collect only the personal data necessary for agreed purposes and K10 asks its customers to only share personal data where it is strictly needed for those purposes. Information collected will typically include name, employer name, contact title, phone, email and other business contact details.
Uses of your personal data
K10 may store and process personal data for the following purposes:
Providing software and, or services
Some of K10’s services require it to process personal data in order to provide deliverables.
Administering, managing and developing K10’s businesses and services
K10 processes personal data in order to run its business, including:
managing its relationship with customers;
developing its business and technology propositions;
maintaining and using IT systems;
internal record keeping
hosting events; and
administering and managing its website, systems and applications.
Security, quality and risk management activities
K10 has security measures in place to protect its customers’ information (including personal data), which involve detecting, investigating and resolving security threats. Personal data may be processed as part of the security monitoring that K10 undertakes; for example, automated scans to identify harmful emails.
K10 monitors the software and, or services provided to customers for quality purposes, which may involve processing personal data. K10 has policies and procedures in place to monitor the quality of its services and manage risks in relation to customer support. K10 collects and holds personal data as part of its customer on-boarding process.
Providing customers with information about K10 and its range of services
Unless K10 is asked not to, it uses customer business contact details to provide information that it considers will be of interest about it and its services.
Why personal data is used
K10 is entitled to use personal data in these ways because:
It needs to do so in order to perform its obligations and exercise its rights in connection with customers’ contracts (or in order to take steps, at a customer’s request, in preparation for entering into a contract);
K10 may need to do so in order to establish, exercise or defend its rights or for the purpose of legal proceedings; or
The use of personal data as described is necessary for K10’s legitimate business interests, where those interests are not overridden by prejudice to the individual’s privacy, such as:
To effectively and efficiently administer and manage the operation of the K10 business and website;
To maintain compliance with internal policies and procedures; or
To maintain effective information management systems.
Disclosure of data to third parties
K10 will only share personal data with others when it is legally permitted to do so. When K10 shares data with others, it puts contractual arrangements and security mechanisms in place to protect the data and to comply with its data protection, confidentiality and security standards.
Personal data held by K10 may be transferred to:
Third party organisations that provide K10 with applications, functionality, data processing or IT services
Third party agents, service providers or contractors, bound by obligations of confidentiality who will only use personal data on K10’s behalf for the purposes described in this notice;
Other professional advisers; and
Law enforcement or other government and regulatory agencies or to other third parties as required by, and in accordance with, applicable law or regulation.
Retention of personal data
How long K10 holds personal data for will vary. The retention period will be determined by various criteria including:
The purpose for which K10 is using it – K10 will need to keep the data for as long as is necessary for that purpose; and
Legal obligations – laws or regulation may set a minimum period for which K10 has to retain personal data.
Rights in relation to personal data
You have a number of legal rights in relation to the personal data that K10 holds about you. These rights include:
The right to obtain information regarding the processing of your personal data and access to the personal data which K10 holds about you (subject to certain exceptions as set out in applicable data protection laws);
The right to request that K10 rectifies your personal data if it is inaccurate or incomplete;
The right to request that K10 erases your personal data in certain circumstances. Please note that there may be circumstances where you ask K10 to erase your personal data but it is legally entitled or required to retain it;
The right to object to, and the right to request that K10 restricts, its processing of your personal data in certain circumstances. Again, there may be circumstances where you object to, or ask K10 to restrict, its processing of your personal data but K10 is legally entitled to continue processing your personal data and/or to refuse that request;
The right to withdraw your consent, although in certain circumstances it may be lawful for K10 to continue processing your data where K10 has another legitimate reason (other than consent) for doing so. K10 is not relying on your consent in order to process your personal data for the purposes and in the manner set out in this notice; and
The right to lodge a complaint with the data protection regulator (details of which are provided below) if you think that any of your rights have been infringed by K10. You also have the right to appeal (i) decisions of the data protection regulator and (ii) against any failure of the data protection regulator to notify you of any investigations or the progress of those investigations.
You can exercise your rights by contacting K10 using the details set out in the “Contacting K10” section below.
You can find our more information about your rights by contacting the UK data protection regulator, the Information Commissioner, or by searching their website at https://ico.org.uk.
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
K10 uses traffic log cookies to identify which pages are being used. This helps it analyse data about web page traffic and improve our website in order to tailor it to customer needs. K10 only uses this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help K10 to provide you with a better website, by enabling it to monitor which pages you find useful and which you do not. A cookie in no way gives K10 access to your computer or any information about you, other than the data you choose to share with K10.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
Links to other websites
K10’s website may contain links to other websites of interest. However, once you have used these links to leave its site, you should note that K10 does not have any control over that other website. Therefore, it cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy notice. You should exercise caution and look at the privacy notice applicable to the website in question.
If you would like any further information about K10’s processing of your personal data or the exercise of any of the rights referred to above, please address questions, comments and requests to the Data Protection Office of K10 at firstname.lastname@example.org.