GENERAL DATA PROTECTION REGULATION (GDPR)

RICHERT & CO DEVELOPMENT LTD

Richert & Co Development Ltd (The Company) is a subcompany of Richert & Co Ltd and is involved in land acquisition, planning, development, construction and sale of new homes.

Richert & Co Ltd is registered as the data controller for the purposes of the Data Protection Act (DPA) with the Information Commissioners Office (ICO) [No. ZA788623].

The Company has taken reasonable steps to ensure that it is compliant with the provisions of GDPR (2018) including the increased emphasis on documentation that data controllers must keep to demonstrate their accountability.

The Richert & Co directors maintain knowledge of GDPR by accessing regular updates from the ICO.

Once data is received by Richert and Co Development Ltd, this information is stored, accessed and shared with staff with whom the Company has an individual or company Data Processing Contract.

Richert & Co stores paper copies of handwritten records and other documents only until these have been scanned into electronic format for secure electronic storage; these paper documents are then securely destroyed. The exception is paper documents that are required to be kept in perpetuity e.g., some relating to conveyancing and Land Registry but these do not contain personal data. Paper documents are usually stored in a locked filing cabinet for a maximum of 3 months after receipt before destruction.

Richert & Co Ltd does not use any remote storage systems for electronic records containing personal data such as iCloud or Dropbox; all data storage within the company uses password protected and encrypted hardware.

On occasions Richert & Co development uses CCTV to monitor building sites remotely when there are no workers on site. The CCTV images are stored only as long as is necessary and then destroyed. CCTV is not in operation during supervised viewings of potential buyers. All CCTV images are deleted after the site is sold.

All personal data is managed according to GDPR recommendations for good practice.

Richert & Co Development Ltd does hold some basic personal data solely for accounting, billing and debt recovery e.g., when dealing with sole traders. This information is shared with appropriate other organizations including estate agents, solicitors/their agents, accountants and debt recovery services. This type of information in relation to accounts and billing, is retained for seven years as required by HMRC and is then securely destroyed.