This privacy policy sets out the data processing practices of CSC Group. Please note that all data thus captured will be used and held in accordance with the requirements of the General Data Protection Regulation.
CSC Group is the controller. If you have any requests concerning your personal data or any queries with regard to how we handle your data you can contact the DPO:
Phone: +353 (0)42 9429512
Email: info@cscfuelcards.com
Post: Data Protection Officer, CSC Group, Unit 7 Oriel Hub, Finnabair Business Park, Dundalk, Co Louth – Republic of Ireland
Contents
The legal basis on which we rely is consent. When you complete our web form we will ask you to confirm your consent for us to contact you via email in order to respond to your query. We will also request that you confirm if you wish us to keep you up to date with our activities and relevant marketing content.
We would like to use your personal data to send you details of products or services that we offer that we have identified as likely to be of interest to you. We will only send you information in line with the preferences you indicated when you provided the personal data.
If at any point you would like to opt-out of receiving communications from us, or would like to change the channels (such as email or post) that we use to contact you, please contact us.
We will keep your personal data in connection with the services or products you have bought for three (3) years after the last purchase. We need to retain this data for our own accounting purposes and for legal and tax purposes.
In terms of personal data we use for marketing, we will keep this data for as long as we are able to market to you. If you withdraw your consent or opt-out of marketing communications, we will keep your contact details only to ensure that we do not contact you again for marketing purposes.
You have rights in respect of your personal data. We will need to confirm your identity before we can consider your request so, if you wish to exercise any of these rights, we will need a copy of your passport, driving licence or a utility bill.
You have the right to be told about the collection and use of the personal data you provide. This privacy policy sets out the purpose for which we process your personal data, how long we will keep your data, and who we will share your data with. If you have any questions on how and why we process your data please contact the DPO.
You have the right to know whether we are processing your personal data, and to a copy of that data. We would need as much information as possible to enable us to locate your data. We will respond to your request within 28 days of receipt. If you want to exercise this right, please contact the DPO at the contact details above.
You have the right to have any incorrect personal data corrected or completed if it is incomplete. You can make this request verbally or in writing. We will need as much information as possible to enable us to locate your data. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above.
This right, often referred to as the right to be forgotten, allows you to ask us to erase personal data where there is no valid reason for us to keep it. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above.
You have the right to ask us to restrict processing of your data. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above.
You have the right to move, copy or transfer your personal data from one IT environment to another. This right applies to data that you have provided to us and that we are processing on the legal basis of consent or in the performance of a contract, and where that processing is by automated means. We will respond to your request within 28 days of receipt. If you want to exercise this right, please contact the DPO at the contact details above.
You have the right to object to our processing of your personal data based on (i) legitimate interests, or for the performance of a task in the public interest or exercise of official authority including profiling; (ii) direct marketing including profiling; and (iii) processing for purposes of scientific or historical research and statistics.
In relation to direct marketing, you have an absolute right to ask us to stop processing your data for that purpose and we will action your request as soon as possible. For other objections, your request should be based on your particular situation and we will consider whether we have compelling legitimate grounds which override your interests. If you want to exercise this right, please contact the DPO at the contact details above.
You have rights in respect of automated decision making, including profiling. Where we carry out solely automated decision making, including profiling, which has legal or similarly significant effects on you, we can only do this if it is in connection with a contract with you, we have a right under law, or you have provided your explicit consent. We will tell you if this happens and tell you how you can request human intervention or challenge the decision. If you want to exercise this right, please contact the DPO at the contact details above.
Where we process your personal data based on your consent you have the right to withdraw that consent at any time without reason. You can opt-out by using the unsubscribe or opt-out link in any marketing we send you, and you can also contact the DPO at the contact details above.
If you are unhappy with any aspect of our handling of your personal data, you have the right to lodge a complaint with the relevant supervisory authority — the Data Protection Commission (DPC) in the Republic of Ireland, or the Information Commissioner's Office (ICO) in Northern Ireland and Great Britain.