We are a distributor and consultancy providing specialist GNSS products and services to engineers, researchers and staff across multiple industry sectors including Defence, Aerospace, Satellite and Space.
GDPR Privacy Notice
INTRODUCTION
1.1 Heedra Ltd and its affiliates (we or us) are committed to protecting your personal information and respecting your privacy.
1.2 This Privacy Notice, together with any other documents referred to in it, sets out the basis on which any personal data that we collect from or about you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we treat it.
1.3 For the purpose of the General Data Protection Regulation, the data controller is Spirent Communications plc (company number 470893), whose registered office is at EPIC Centre Paignton, 2-01 Heedra Ltd, Waddeton Close, Paignton, Devon, TQ4 7RZ
1.4 We may update this Privacy Notice from time to time. Any changes we make in the future will be posted on our website here. Please check back regularly to see any updates or changes to this Policy.
DATA PROTECTION LEAD
2.1 The contact details for our Data Protection Lead:
• 2.1.1 Email: Andrew.addy@heedra.co.uk
• 2.1.2 Telephone: +44 (0) 1803 714750
• 2.1.3 Letter: EPIC Centre Paignton, 2-01 Heedra Ltd, Waddeton Close, Paignton, Devon TQ4 7RZ
2.2 It is the responsibility of the Data Protection Lead to keep our organisation and our staff informed and advised about their obligations to comply with data protection laws, to monitor compliance with those laws, to advise on data protection impact assessments, to train staff and conduct internal audits, and to be the first point of contact for supervisory authorities and for individuals whose personal data we are processing.
2.3 You can contact the Data Protection Lead if you have any questions or concerns about personal data and privacy matters, or about this Privacy Notice. Please include the words DATA PRIVACY REQUEST in the subject line of your email, or at the top of your letter.
PARTICULARS OF PROCESSING
3.1 We process personal data about Heedra’s stakeholders (by which we mean current and former employees and contractors, customers and potential customers, shareholders, and any other person who has contact with Heedra) in a range of ways, and for a range of purposes.
3.2 The other categories of person about whom we process personal data are described in more detail in the Particulars of Processing that are set out in the Schedules to this Privacy Notice. The specific Schedules are as follows:
• 3.2.1 Customer contacts and sales prospects;
• 3.2.2 Shareholders;
• 3.2.3 Suppliers; and
• 3.2.4 People whose data we receive from third parties.
3.3 It may be the case that you have contact with us in more than one capacity, so please look at all the Schedules that may apply to you if you wish to know more about how we process your personal data.
YOUR RIGHTS AS A DATA SUBJECT
4.1 This Section 4 sets out the rights that you have as a data subject, by reason of the General Data Protection Regulation.
4.2 You have the following rights:
• 4.2.1 The right to request access to the personal data that we hold about you;
• 4.2.2 The right to request rectification of the personal data that we hold about you;
• 4.2.3 The right to request erasure of the personal data that we hold about you;
• 4.2.4 The right to request restriction of processing about you;
• 4.2.5 The right to object to processing; and
• 4.2.6 The right to data portability. You can find more details about the above rights by going to the ICO website which is at https://ico.org.uk/. If you wish to invoke any of the above rights, please notify our Data Protection Lead, using the contact details set out in Section 2 above. Please include the words DATA PRIVACY REQUEST in the subject line of your email, or at the top of your letter.
4.3 Where our processing of personal data is based on your having given consent, you have the right as a data subject to withdraw that consent at any time. If you wish to invoke this right, please notify our Data Protection Lead using the contact details set out in Section 2 above. Please include the words DATA PRIVACY REQUEST in the subject line of your email, or at the top of your letter. 4.4 You have the right to lodge a complaint with a supervisory authority. In the United Kingdom, the supervisory authority is the Office of the Information Commissioner, full contact details for which can be found at https://ico.org.uk/global/contact-us/
SCHEDULES
Schedule 1
Data subject category: personal data relating to customer contacts and sales prospects
Schedule 2
Data subject category: shareholders
Schedule 3
Data subject category: personal data relating to Suppliers
Schedule 4
Data subject category: people whose data we receive from third parties
