GDPR Policy
At Pegasus Chauffeur LTD, we are committed to protecting the privacy and security of our clients' personal information. We understand the importance of complying with the General Data Protection Regulation (GDPR), and have implemented the following policies and procedures to ensure compliance:
Lawful Basis for Processing Personal Data: We only process personal data where we have a lawful basis to do so. This includes where the processing is necessary for the performance of a contract with the client, for compliance with a legal obligation, or where the client has provided their consent.
Data Minimization: We only collect and process personal data that is necessary for the provision of our chauffeur services. We do not collect or store any unnecessary or excessive personal data.
Data Accuracy: We take all necessary measures to ensure that personal data is accurate, complete, and up to date. Clients may request corrections or updates to their personal data at any time.
Data Retention: We only retain personal data for as long as necessary to provide our chauffeur services or as required by law. Once personal data is no longer required, we securely delete or anonymize the data.
Data Security: We take all necessary measures to ensure the security of personal data, including the use of secure servers, encryption, and restricted access. We also provide training to our employees and contractors on data protection and security.
Data Subject Rights: We respect the rights of data subjects, including the right to access, rectify, erase, restrict processing, object to processing, and data portability. Clients may exercise these rights at any time by contacting us directly.
Data Breach Notification: In the event of a personal data breach, we will notify affected clients and the supervisory authority within 72 hours of becoming aware of the breach.
Data Protection Officer: We have appointed a Data Protection Officer (DPO) to oversee data protection and compliance with the GDPR. Clients may contact the DPO with any questions or concerns related to data protection.
By implementing this GDPR policy, we can ensure that our clients' personal data is processed lawfully, fairly, and transparently, and that their rights are respected and protected.
