'KDERC' is trading name of KDERC International Limited.
We are committed to compliance with all relevant laws regarding personal data, and the protection of the rights and freedoms of individuals whose personal data or information we collect and process. We do this in accordance with the General Data Protection Regulation (GDPR) now embodied in the Data Protection Act 2018.
KDERC is a “data controller”. This means that we are responsible for deciding how we hold and use personal data or information about you. This is called “personal data” throughout this privacy notice.
We collect, store and process personal data relating to those who use our services in order to both manage our relationship with them and to facilitate resolution of the issues with which they are involved.
This privacy notice sets down how we collect and uses personal data about you during and after the end of our period working with you.
However, this privacy notice does not form part of any agreement with you and we may be update it at any time.
We are committed to protecting the privacy and security of your personal data. This starts with our being clear and transparent about how we collect and use that data in accordance with our data protection obligations.
2. Data Protection Principles
We are required to ensure that the personal data we hold about you is:
3. What Information does KDERC collect and process?
We collect and process a range of personal data about you. Personal data means any information about an individual from which the person can be identified. This includes:
4. Why does KDERC process personal data?
We need to process personal data to both enter into our agreements and/or
arrangements with and to meet our obligations under our referral agreement(s).
Also, we have to process personal data to ensure that we are complying with our legal obligations, e.g. when ensuring that all our processes are fair and law-compliant.
In other cases, we have a legitimate interest in processing personal data before, during and after the end of our period working with you.
5. When does KDERC use personal data?
Situations in which we will process your personal data are listed below In order to:
6. Failure to provide personal data
If you do not provide certain information when requested, we may not be able to carry out a grievance investigation or mediation either as we would have wished or at all.
7. Change of Purpose
We will only use your personal information for the purpose for which it was collected unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will advise you of this and explain the legal basis which allows us to do so.
You should be aware that we may process your personal data without your knowledge or consent where this is required or permitted by law.
8. How we use Sensitive Personal Information
Some special categories of personal data, such as information about health or medical conditions, is processed to carry out our legal and other obligations e.g. in relation to those with disabilities and for health and safety purposes.
We use other special categories of personal data, such as information about ethnic origin, sexual orientation, health or religion for the purposes of meaningful equal opportunities monitoring or reporting.
Data used by the Company for these purposes is anonymised or is collected with the express consent of those concerned. Consent given for this purpose can be withdrawn at any time.
9. Information about criminal convictions
We will only collect information about criminal convictions during the course of a grievance investigation if this is appropriate or where we are legally required to do so.
10. Automated Decision-Making
No part of our processes is based solely on automated decision-making.
11. How long does KDERC keep personal data?
We will only hold your personal data for as long as is necessary to fulfil the purposes for which we collected, including any legal, accounting, reporting, monitoring or enforcement requirements.
12. Who has access to personal data?
Your personal data obtained during a grievance mediation may be shared with your employer and others involved in that investigation. Personal data obtained during a grievance mediation, together with all other matters communicated during a grievance mediation will be privileged and not disclosed to any other person or body without your prior consent unless required by law.
Your data may be transferred to third countries or international organisations outside the European Economic Area (EEA). However, in such cases we check that there is an adequate level of protection established.
13. How does KDERC protect personal data?
We take the security of your personal data seriously. We have internal policies and controls in place to prevent your data being lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees or others in the performance of their duties.
Examples of the policies and controls that we have are:
14. Your duty to inform us of changes
It is important that the personal data we hold about you is accurate and current. Please be sure to promptly keep us informed if your personal information changes during our period working with you.
15. Your rights
As a data subject, you have a number of rights. You can: