Storing this information
We hold your personal data both in hard copy files and on IT systems. The information will be stored until the expiration of a period of six years after the termination of our relationship with the scheme which you have been a member of.
We take the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.
Who we share this information with
Personal data may be shared with the senior management of the Company and employees of the Company’s Insurance Manager, Robus Risk Services (Guernsey) Limited, a company regulated by the Guernsey Financial Services Commission. Information may also be shared with the Company’s auditors and parties that provide certain information technology and data processing services to us so that we may operate our business.
In limited and necessary circumstances, your information may be transferred outside of the European Union, or countries not appearing on the Adequacy list, or to an international organisation, to comply with our legal or contractual requirements. Those transfers would always be made in compliance with relevant data protection legislation and we would ensure that appropriate safeguards to protect your personal data were put in place.
Under the General Data Protection Regulation (GDPR) and the Data Protection (Bailiwick of Guernsey) Law, 2017 (the DP Law), you have certain rights with regards to your personal data. You have the right to request from us access to and rectification of your personal data. If you would like access to the data we hold, we must receive a request in writing in order to fulfil the request. This request should be sent to us by email or by regular post as per the contact details stated below.
In certain circumstances, you have the right to request erasure of your personal data, the right to restrict processing, object to processing, and the right to data portability.
If you have provided consent for the processing of your data, you have the right to withdraw that consent at any time, which will not affect the lawfulness of the processing before your consent was withdrawn.
You have the right to file a complaint with the Data Commissioner’s Office in Guernsey if you believe that we have not complied with the requirements of GDPR or the DP Law with regard to your personal data.