Privacy Policy
Data Protection Policy
Luna Verde Energia
1. Introduction
Luna Verde Energia is committed to protecting the privacy and security of personal data. This policy outlines our obligations and practices for handling personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
2. Scope
This policy applies to all personal data processed by Luna Verde Energia, including data relating to employees, customers, suppliers, and other stakeholders. It covers all forms of data, whether electronic or physical.
3. Definitions
• Personal Data: Any information relating to an identified or identifiable natural person.
• Data Subject: The individual to whom personal data relates.
• Processing: Any operation performed on personal data, such as collection, storage, use, or deletion.
• Data Controller: Luna Verde Energie, as the organisation that determines the purposes and means of processing personal data.
• Data Processor: Any third party that processes personal data on behalf of Luna Verde Energie.
4. Data Protection Principles
We adhere to the following principles when processing personal data:
• Lawfulness, Fairness, and Transparency: Data is processed lawfully, fairly, and transparently.
• Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes.
• Data Minimization: Data collected is adequate, relevant, and limited to what is necessary.
• Accuracy: Data is accurate and kept up to date.
• Storage Limitation: Data is kept for no longer than necessary.
• Integrity and Confidentiality: Data is processed securely.
• Accountability: We are responsible for demonstrating compliance with these principles.
5. Types of Data Collected
We may collect the following types of personal data:
• Contact Information: Name, address, email address, telephone number.
• Financial Information: Bank details, payment information.
• Employment Information: Job title, employment history.
• Usage Data: Information about how our services are used.
6. Legal Basis for Processing
We process personal data based on one or more of the following legal bases:
• Consent: The data subject has given explicit consent to the processing.
• Contract: Processing is necessary for the performance of a contract.
• Legal Obligation: Processing is necessary to comply with a legal obligation.
• Legitimate Interests: Processing is necessary for our legitimate interests, provided those interests do not override the rights and freedoms of the data subject.
7. Data Security
We implement appropriate technical and organisational measures to ensure the security of personal data, including protection against unauthorised access, loss, or destruction. These measures include:
• Encryption
• Access controls
• Regular security assessments
• Employee training
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.
9. Data Subject Rights
Data subjects have the following rights:
• Right to Access: The right to request access to their personal data.
• Right to Rectification: The right to correct inaccurate or incomplete data.
• Right to Erasure: The right to have their data erased under certain circumstances.
• Right to Restriction of Processing: The right to restrict the processing of their data.
• Right to Data Portability: The right to receive their data in a portable format.
• Right to Object: The right to object to the processing of their data.
• Right to Withdraw Consent: The right to withdraw consent at any time.
10. Data Transfers
If we transfer personal data outside the UK or the European Economic Area (EEA), we ensure appropriate safeguards are in place to protect the data.
11. Data Breach Notification
In the event of a data breach, we will notify the relevant supervisory authority and affected data subjects as required by GDPR.
12. Responsibilities
All employees of Luna Verde Energia are responsible for complying with this policy. The Data Protection Officer is responsible for overseeing the implementation of this policy.
13. Contact Information
If you have any questions or concerns about this policy or our data protection practices, please contact:
Data Protection Officer
Luna Verde Energia
3 Heild Grove, Nantwich, England, CW9 6LN
info@lunaverdeenergia.com
14. Policy Updates
This policy will be reviewed and updated periodically to ensure it remains accurate and compliant with applicable laws.