Privacy Policy

Identity of the Controller/Processor:

Venture UK Group Limited T/A Autostone are a company that provides servicing and repair services for motor vehicles. We are based in our offices in Hertfordshire in the UK, the details of which are provided on the contact details section at the end of this notice.

General Data Protection Regulation (GDPR):

Venture UK Group Limited T/A Autostone understands that your privacy is important to you and that you care how your personal data is used. Venture UK Group Limited T/A Autostone respect and value the privacy of all our Clients, Suppliers, Website Visitors, Employees, Job Applicants and Complainants and we will only collect and use your personal data in the ways that are outlined within this Privacy Notice and in a way that is consistent with our obligations and your rights under the law.

Venture UK Group Limited T/A Autostone are required to comply with the standards outlined within the GDPR which is in effect from 25th May 2018. This is a legal framework that sets guidelines for the collection and processing of personal data within the European Union (including the UK). Venture UK Group Limited T/A Autostone are committed to collecting, storing and using all personal data in a way that complies with the standards set within the GDPR.

Our promise to you:

Venture UK Group Limited T/A Autostone promise that your personal data will be:

processed lawfully, fairly and in a transparent manner;collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;accurate, and where necessary, kept up to date; every reasonable step will be taken to ensure that personal data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay;kept in a form which permits identification of the individual for no longer than is necessary for the purposes for which the personal data is processed;processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organisational measures;

​Venture UK Group Limited T/A Autostone shall be responsible for and will be able to demonstrate compliance with the above principles.

Who this Privacy Notice applies to:

The details included within this privacy notice explain how we collect personal data, why we collect personal data, how long we retain personal data for and how your personal data is secured. However, this information will only apply to you if;

You use our services (e.g. customers, potential customers and former customers);You are a supplier of products or services to Venture UK Group Limited T/A Autostone (e.g. Parts suppliers; Accountants, Tax advisers, HR/payroll service);You are a visitor to our website;You are a current or former employee of Venture UK Group Limited T/A AutostoneYou have applied for a job position at Venture UK Group Limited T/A Autostone or have sent your CV speculatively to Venture UK Group Limited T/A AutostoneYou have a complaint concerning our company or an employee at Venture UK Group Limited T/A Autostone

The purpose of processing personal data and the legal basis:

We process personal data for the purposes of motor vehicle repair services to a range of our customers throughout the United Kingdom. We are a data controller for people making enquiries about our services and for our direct customers. We also process personal data on behalf of our employee’s, both current and past, as well as processing personal data for people applying for jobs, advertised or speculative with Venture UK Group Limited T/A Autostone. We also process personal data for our suppliers.

Legal basis for processing:

a) Enquiries – Venture UK Group Limited T/A Autostone have a legitimate interest to respond to the enquiries of a customer or a potential customer or to speak to them on their first point of contact to identify what their enquiry is in relation to. Initially this is to allow us to understand if Venture UK Group Limited T/A Autostone can provide our services to the individual. Venture UK Group Limited T/A Autostone also record the contact details including name, telephone number and/or email address of non-customer enquires such as enquires from Government Departments and/or marketing and other miscellaneous enquires.

b) Website visitors – Venture UK Group Limited T/A Autostone collects information about visitors to our website in order to analyse how our website is used and to improve our services. The information we collect includes how many visitors we have, the most popular browsers and sources of traffic.

Venture UK Group Limited T/A Autostone website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of the website. By using the website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

If you choose to submit a general enquiry form on our website, the information which you provide within the form is sent to an email address which is managed effectively by one member of staff within Venture UK Group Limited T/A Autostone. Venture UK Group Limited T/A Autostone have a legitimate interest to respond to all enquiries made to the company. One member of staff is responsible for managing all enquiry forms, however, in some situations that member of staff may be unable to deal with your enquiry. In this case your details that you have provided will be passed on to another suitably qualified employee of Venture UK Group Limited T/A Autostone so that your enquiry can be dealt with in the most appropriate way possible.

If you choose to contact us through the website, we will retain your details securely. As a company we are committed to maintaining your privacy and will not disclose, rent, share or sell your details unless required legally to do so.

c) Suppliers – At Venture UK Group Limited T/A Autostone we have a legitimate interest to process personal information in relation to our suppliers. This information is only used as a way of contacting the individual/ company in relation to the products or services that they currently supply or as a way of contacting new suppliers. Information in relation to suppliers is also used by the accounts department at Venture UK Group Limited T/A Autostone for processing payments. This information is only held for the duration of time that is stated within our retention policy.

d) Current and former employees – Venture UK Group Limited T/A Autostone have a legal obligation and an employment contract in place to process personal data on behalf of employees within the company. Employee information is only held for purposes that are relevant to their employment with Venture UK Group Limited T/A Autostone. This information may be forwarded on to third party companies who deal with payroll, pension schemes and other employment matters on behalf of Venture UK Group Limited T/A Autostone. Once a person’s employment has come to an end with Venture UK Group Limited T/A Autostone we will retain the employee information for the duration that is stated within our employee retention policy.

e) Job Applicants – At Venture UK Group Limited T/A Autostone we have a legitimate interest for processing personal data on behalf of job applicants responding to an advertised vacancy or individuals providing us with a speculative CV for a future job opening within the company. In some circumstances we may disclose your information to a third party, for example; if we wish to obtain a reference from one of your previous employers, however we will not do this without informing you unless otherwise required under law. We will only retain this personal data in accordance to our employee retention policy.

f) Vital Interest – In the unlikely event that any person visiting our offices or travelling with any of our employees on business becomes unwell, we may rely on the legal basis of vital interest in the event we have to pass on the personal details of the unwell person to a medical facility or medical representative.

Recipients of the personal data:

Your personal data will be provided to our employees only where it is essential Venture UK Group Limited T/A Autostone to carry out its purpose. Your personal data in the form of financial information will only be passed to the accounts department of Venture UK Group Limited T/A Autostone and where essential to our Chartered Accountant and to our Bank and/or credit card processing services.

Details of transfers to third country and safeguards:

Where we are instructed to transfer personal data to a country located outside of the European Economic Area (EEA), we will only send such data if the recipient is in a country that has been deemed by the European Commission to have an adequate level of data protection, or if other suitable assurances and/or safeguards are in place. If the recipient is in the USA, data will be sent provided the recipient is signed up to the EU-US Privacy Shield. If the recipient is not in a country subject to a positive finding of adequacy by the Commission, nor signed up to the EU-US Privacy Shield, then a risk assessment into whether the proposed transfer will provide an adequate level of protection for the rights of the data subjects will be conducted.

Risk assessment criteria comprise general adequacy criteria and legal adequacy criteria. General adequacy criteria include: risk to the rights and freedoms of individuals, the purpose for which the data are intended to be processed, the time for which the transferred data is intended to be processed, the country of origin of the data, the recipient country, and other security measures being taken. Legal adequacy criteria will be assessed where it is deemed, from the general adequacy risk assessment, that the proposed data transfer presents a medium-to-high risk to the rights of the data subjects. These include considering the legal framework and international obligations of the recipient country regarding processing of personal data.

Where adequacy is not established via the risk assessment, personal data will only be sent to a recipient who has entered into a contract with Venture UK Group Limited T/A Autostone, the contract containing model clauses imposing obligations on both the exporter and importer of the data to ensure that the transfer arrangements protect the rights and freedoms of the data subjects.

Retention Period:

Venture UK Group Limited T/A Autostone will only process personal data for the duration of time that the personal data is needed to carry out the motor vehicle repair services on behalf of the data subject.

Venture UK Group Limited T/A Autostone will retain client personal information for as long as required by statute and as long as required to comply with our professional, financial and regulatory obligations.

We retain employee personal data for 7 years beginning from the end of the calendar year in which they leave our employment. We retain job applicant data and speculative CV’s for 1 year from the end of the calendar year in which the job application was received.

The Rights of Customers, Suppliers, Website Visitors, Employees, Job Applicants and Complainants:

Right of confirmation

Under the GDPR you have the right to obtain clarification from Venture UK Group Limited T/A Autostone in relation to whether or not your personal data is being processed by Venture UK Group Limited T/A Autostone. You can obtain this clarification at any time by contacting our head office at the address below.

Right of access

Under the GDPR you have the right to obtain a copy of the information Venture UK Group Limited T/A Autostone has stored relevant to you. You can avail of these rights at any given time by contacting our head office at the address below. The information that you can request access to includes;

The categories of personal data concerned;he reason why the data is being processed;A list of recipients of who the personal data has or will be disclosed to; If your personal data is transferred to a third party then you have the right to be informed of the relevant safeguards that have been put in place to ensure that your personal data is protected.The retention period in which the personal data will be retained within Venture UK Group Limited T/A Autostone or if this is not possible you have a right to understand the criteria used to determine the retention period.

You also have the right to;

Request erasure, object to processing or place restrictions of processing of your personal data; Lodge a complaint with an appropriate supervisory authority if your personal data has been collected from anyone other than yourself, and a right to obtain any available information surrounding the source of the third party; Identify the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for yourself.

Right to rectification

Under the GDPR you have the right to instruct Venture UK Group Limited T/A Autostone to correct any inaccurate personal data which we process on your behalf. This process has to take into account the purposes which the data is processed for. You also have the right to Venture UK Group Limited T/A Autostone to complete any incomplete personal data that we hold. This can be done by providing Venture UK Group Limited T/A Autostone with a supplementary statement. You can avail of the right to rectification at any given time by contacting our head office at the address below.

Right to erasure

Under the GDPR you have the right to request erasure of your personal data which is held by Venture UK Group Limited T/A Autostone. As long as the processing of the personal data is not necessary, we shall erase the data without undue delay where one of the following grounds applies;

The personal data is no longer needed for the purpose in which the data was initially collected or processed; You withdraw consent to the processing, and where there are no other legal grounds for the processing; You object to the processing and there are no overriding legitimate grounds for the processing;If the personal data has been unlawfully processed; Venture UK Group Limited T/A Autostone are subject to another legal obligation under a European Union or Member State Law which states that personal data must be erased to comply with those laws; The personal data has been collected in relation to the offer of information society services.

You can avail of the right to erasure at any given time by contacting our head office at the address below.

Venture UK Group Limited T/A Autostone have made the personal data public and we are obliged under the bullet points above to erase the personal data, we shall (taking into account the available technology and the cost of implementation) take reasonable steps, including technical measures, to inform controllers who are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Right of restriction of processing

Under the GDPR you have the right to request restriction of processing by Venture UK Group Limited T/A Autostone where either of the following points apply;

​The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data; You oppose the erasure of your personal data as you believe the processing is unlawful and instead request restriction of the personal data; If we no longer require the personal data for the purpose for which the processing occurred, but we are required by you for the establishment, exercise or defence of legal claims; You have objected to processing however, the verification is pending on whether the legitimate grounds of Venture UK Group Limited T/A Autostone over rule yours.

You can avail of the right to restriction of processing if the above conditions are met, by contacting our head office at the address below.

Right to data portability

Under the GDPR you have the right to data portability, meaning that you have the right to receive a copy of your personal data and reuse the data for your own purposes e.g. to send to another data controller. This personal data must be provided to you in a secure machine-readable format. However, this right only applies to information which you have provided to Venture UK Group Limited T/A Autostone or alternatively if Venture UK Group Limited T/A Autostone’s lawful basis for processing your information is consent or the performance of a contract or if Venture UK Group Limited T/A Autostone process your data by automated means (this excludes paper files).

Right to object

Under the GDPR you have the right to object to the processing of your personal data on grounds relating to your particular situation at any given time. This also applies to profiling based on these provisions. If you object to the processing of your personal data then Venture UK Group Limited T/A Autostone shall comply with your objections unless we can demonstrate legitimate grounds for the processing which overrides your rights and freedoms and your interests or for the establishment, exercise or defence of legal claims or if the processing is necessary for the performance of a task carried out for reasons of public interest.

You also have the right to object to the processing of your data for direct marketing purposes at any given time. If you wish to avail of the right to object you can contact our head office at the address below.

Automated individual decision-making, including profiling

Under the GDPR you have the right to object to decisions being made surrounding your personal data by an automated process, this includes profiling which produces legal or personal effects concerning yourself as long as the decision is not necessary for entering into, or the performance of a contract between yourself and Venture UK Group Limited T/A Autostone or is not authorised by European Union or Member State law to which Venture UK Group Limited T/A Autostone is subject and also lays down reasonable measures to safeguard your rights and freedoms and legitimate interests, or is not based on your consent.

If the decision is necessary for entering into, or the performance of a contract between yourself and Venture UK Group Limited T/A Autostone or it is based on your explicit consent, then we shall take the appropriate measures to safeguard your rights and freedoms and legitimate interests.

If you wish to avail of these rights highlighted above, you can contact our head office at the address below.

Right to withdraw data protection consent

You have the right under the GDPR to withdraw your consent to processing your personal data at any time. If you wish to avail of these rights, please contact our head office at the address below.

Your Right to lodge a complaint with the supervisory authority:

If you have a complaint, please do not hesitate to contact our head office at the address below. We will endeavour to thoroughly investigate your complaint and get back to you in writing as soon as possible.

If you believe your complaint has not been handled to your satisfaction you can refer your complaint to the following address if your complaint is in relation to the way your personal data is obtained, processed or retained by Venture UK Group Limited T/A Autostone:

Information Commissioner’s Office

Wycliffe House, Water Lane,

Wilmslow, Cheshire,SK9 5AF

Third party suppliers/ processors:

Venture UK Group Limited T/A Autostone use third parties to process, secure and manage personal data on our behalf. We have taken the appropriate measures to ensure that our third parties are compliant under the GDPR and where necessary service agreements have been put in place in order to protect all personal data. If you have any questions are queries in relation to the third parties that we use, please do not hesitate to contact our head office at the address below.

Contact details:

Venture UK Group Limited T/A Autostone can be contacted by post at the address below:

Brookside House C/O 24 Brookside Road, Oxhey, Watford, Hertfordshire, WD19 4BP

If you have any questions about this Privacy Policy, please contact us at info@autostone.co.uk