Michaelis Aviation Consulting
GDPR Data Protection – Privacy Policy Statement
Michaelis Aviation Consulting (2nd Floor, Afon Building, Worthing Road, Horsham, West Sussex, RH12 1TL, United Kingdom) takes the collection and storage of your information very seriously and is compliant with the European General Data Protection Regulations 2018. Michaelis Aviation Consulting is both the data controller and data processor and is registered with the Information Commissioner’s Office (ICO). Some of the information collected is classified as sensitive personal data. The reasons for collecting this data are ‘legitimate interest’ and ‘provision of health and safety advice’ in order to provide assessment and guidance. Please see the ICO website for further explanation of these. You have a right to know:
What personal information is being stored about you,
Where personal information is stored
How long it is stored for
The security of the information held
Who it is shared with
How to access the information stored about you
What information is being stored?
As part of this assessment the following information will be stored: collected data, session notes, reports and relevant personal data.
Where personal information is stored?
Paper records, test forms and correspondence are stored in a locked filing cabinet to which only Michaelis Aviation Consulting has access.
Emails and computer based records are stored on a specific computer with password protection to access the computer and on cloud based storage whilst assessment/ investigation is on-going. These records are backed up on a monthly basis, or at the end of assessment/intervention to an encrypted hard drive. Both computer and hard drive are password protected when not in use. The data collected from any assessments adheres to European Union global data privacy laws.
Contact details including mobile phone numbers and email addresses are also accessible on a mobile phone in order to facilitate ease of access and communication during the working day. This phone is password protected. Once active investigation or assessment is completed contact details for clients is deleted from the phone and stored only in the client notes.
How long are the records kept?
There are legal and professional guidelines covering the length of time before information collected in the context of investigations must be kept in accordance with legislation and professional guidelines including the General Data Protection Regulation of 2018.
This means that there is a legal obligation to store paper and electronic information for 7 years, at which point it will be deleted/destroyed, i.e. when the personal data is no longer necessary in relation to the purpose for which it was originally processed.
Who is information shared with?
Information obtained during investigations is confidential and can ordinarily be released only with your written permission. You will be asked whether you consent to information being shared with other people who may be involved in the investigation of your case.
There are some special circumstances that can limit confidentiality and form a legal basis to process and share personal data, including: a) criminal activity including, but not limited to, acts of terrorism or air accident investigation. In such circumstances, there is a legitimate interest to hold and process your personal information in order to ensure a professional duty of care.
Your contact details will not be shared for any marketing purposes.
How do I access the information held about me?
You have the right to request copies of any information that Michaelis Aviation Consulting holds about you. This is called a Subject Access Request. You need to make this request in writing or by email to Michaelis Aviation Consulting. Please be aware that information may not be shared if disclosure breaches copyright law or where there is the potential to interfere with an on going accident or incident investigation.