Privacy Policy.

OHS Limited

OHS Ltd is committed to protecting and respecting your privacy.

This privacy policy ( along with the terms and conditions ) sets out the foundation on which any data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our thoughts and practice regarding your personal data and how it will be treated.

The General Data Protection Regulation (GDPR) aims to help data protection legislation across EU member states, enhancing your privacy rights and provide a strict framework within which commercial organisations can legally operate.

For the purpose of the Data Protection Act 1998 (the Act) and the GDPR, the data controller is OHS Ltd.

Data we may collect and process about you:

Information from filling in forms on our site www.ohsgroup.co.uk. This includes information provided at the time of registering to use our site (if applicable), or subscribing to our service, posting material or requesting further services.
If you contact us, we may keep a transcript of this communication.
We may ask you to complete surveys that we use for research purposes, you do not have to respond to these.
Details of your visits to our site; traffic data, location data, other communication data.
IP addresses.

We may collect information about your computer, IP address, operating system and browser type, for system administration and to report aggregate information. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.

Cookies
Our website uses cookies. This helps to provide you with a good experience when you browse our website.

Where your data is stored
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Legal basis for the processing
Our legal basis for the processing of personal data is our legitimate business interests, described in more detail below, although we will also rely on contract, legal obligation and consent for specific uses of data.

We will rely on contract if we are negotiating or have entered into a placement agreement with you or your organisation or any other contract to provide services to you or receive services from you or your organisation.

We will rely on legal obligation if we are legally required to hold information on you to fulfil our legal obligations. We will in some circumstances rely on consent for particular uses of your data and you will be asked for your express consent, if legally required.

Uses made of the information
Our legitimate interests in collecting and retaining your personal data is described below:

To allow you to participate in interactive features of our service, when you choose to do so.
To ensure that content from our site is presented in the most effective manner for you and for your computer.
To notify you about changes to our service.
We may also use your data, or permit selected third parties to use your data, to provide you with information about services which may be of interest to you and we or they may contact you about these by post or telephone.

If you are a new user, and where we permit selected third parties to use your data, we (or they) will contact you by electronic means only if you have consented to this.

If you do not want us to use your data in this way, or to pass your details on to third parties for marketing purposes, please inform us through the preference centre we make available to you or by contacting us at info@ohs.co.uk.

We do use our computer systems to search and identify personal data in accordance with parameters set by a person. A person will always be involved in the decision-making process.

Please take note, if you attend one of our events, we often take photos and/or record the event to share with our networks who couldn’t attend in person, via social media or otherwise. You hereby consent to the sharing of any media taken at our events. If you attend one of our events and do not wish to appear in any post-event photos and/or filming, please contact us directly (info@ohs.co.uk).

Consent
Should we want or need to rely on consent to lawfully process your data we will request your consent orally, by email or by an online process for the specific activity we require consent for and record your response on our system. Where consent is the lawful basis for our processing you have the right to withdraw your consent to this particular processing at any time.

Disclosure of your information
We may disclose your personal information to any member of our group both in the EEA and outside of the EEA, which means, where applicable, our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

We may disclose your personal information to third parties:

In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
If we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our users / delegates will be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms and Conditions.
Where we have retained them to provide services, at the request of our client, such as reference, qualification and reference checking services, or the verification of any third party data provided by you.

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

The GDPR provides you with the following rights:

Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
You also have the right to object where we are processing your personal information for direct marketing purposes.
Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
Request the transfer of your personal information to another party in certain formats, if practicable.
Make a complaint to a supervisory body which in the United Kingdom is the Information Commissioner’s Office. The ICO can be contacted through this link: https://ico.org.uk/concerns/

Access to information
The Act and the GDPR gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act (and the GDPR once it is in force). Prior to 25th May 2018 any access request under the Data Protection Act will be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you. A subject access request should be submitted to info@ohs.co.uk. No fee will apply once the GDPR comes into force.

Changes to our privacy policy
Any changes we may make to our policy in the future will be added to this page and, where appropriate, notified to you by e-mail.