The information we hold about you falls into the following categories:
Your information may be passed to and used by all Onesys Group companies. We will never pass your data to anyone else, except for use by our software partners whilst processing your service or product request on our behalf within the EU. In addition, we may need to share your data with our software partners and the suppliers of our email distribution and support desk solutions who are located in the United States of America (see below).
Details of transfers to third country and safeguards
Onesys Limited use Mailchimp for the distribution of company newsletters and marketing communications. Mailchimp are registered with the EU-US privacy shield and will only process personal data provided by Onesys Limited (company name, contact name, email address) on our instructions.
The Onesys Limited support desk function is controlled by software developed by Freshworks on servers which are hosted by Amazon Web Services situated in Virginia USA. Amazon Web Services are ISO27001 compliant and Freshworks are registered with the EU-US privacy shield and will only process personal data (company name, contact name, email address, phone number) provided by Onesys Limited on our instructions.
Retention period or criteria used to determine the retention period
OSL will retain personal details of clients whilst a contract exists between OSL and a given client and for a period of six years following termination of the contract. OSL will retain the personal details of our prospects for a period of six years.
Data Subject Rights - Subject Access Requests
The General Data Protection Regulation (GDPR) grants you (hereinafter referred to as the ‘data subject’) the right to access particular data that we hold about you. This is referred to as a subject access request. We shall within one month from the point of receiving the request and all necessary information about you. Our formal response shall include details of the personal data we hold about you including:
Right to rectification
You, the data subject, shall have the right to obtain from us, without undue delay, the rectification of inaccurate personal data we hold concerning you. Taking into account the purposes of the processing, you, the data subject, shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.