Privacy Policy

PRIVACY POLICY

This Privacy Notice (or “Notice”) is provided by Harnessing Sustainable Growth (HSG) Limited and our group companies (the “Company”, “we”, “our” or “us”) and is intended to provide you with all of the information that you need to understand the personal data that we may have about you.

In particular, the Notice describes the categories of personal data we may process, how your personal data may be processed and how your privacy is safeguarded in the course of our relationship with you. It is intended to comply with our obligations to provide you with information about the Company’s processing of your personal data.

We take your data protection rights and our legal obligations seriously. Your personal data will be treated in a secure and confidential manner and only as detailed in this Notice.

The Notice is divided into sections, which relate to the type of relationship that you have with the Company. Each section will give you information relating to the way we manage personal data in each of the types of relationships or interactions that we may have with you. Please ensure that you review the Overview pages carefully, as these will apply to you regardless of our relationship with you.

Of course, not all of the sections in the Notice will be relevant to everyone. The Notice is intended to provide details of all the processing activities that we undertake and therefore the mere listing of an activity in this Notice does not mean that we are processing your personal data in this manner and for these purposes. If you have any questions about how the information presented relates to you, please do contact us using the relevant contact details appearing in the contact us section.

Glossary

Automated decision-making means a decision made by automated means without any human involvement.

A data controller means a natural or legal person (such as a company) who determines the means and purposes of processing personal data. For example, the HSG entity which contracts with you will be your data controller as it determines how it will collect personal data from you, the scope of data which will be collected, and the purposes for which it will be used.

A data processor means a natural or legal person (such as a company) that is responsible for processing personal data on behalf of a controller.

EEA means the European Economic Area, which includes all EU countries and also Iceland, Liechtenstein and Norway.

EU countries are Austria, Belgium, Bulgaria, Croatia, Republic of Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain and Sweden. Until the UK leaves the EU, this list also includes the UK.

GDPR and applicable local law means the General Data Protection Regulation (GDPR), which is the law governing data privacy in the European Union as well as the applicable data protection law in each of the relevant jurisdictions where we collect, use, disclose and process your personal data

Personal data is information that relates to a living individual. It includes information that may identify a person by name and contact details, or refer to associated information such as account activity, or personal preferences that can directly or indirectly identify an individual.

Processing means any and all actions we take with respect to your personal data, including (without limitation) collecting, managing, viewing, holding, storing, deleting, changing, using, disclosing and saving.

Special categories of personal data mean any personal data relating to your health, genetic or biometric data, sex life, sexual orientation, racial or ethnic origin, political opinions, religious or philosophical beliefs, and trade union membership.