consultancies, vendors or suppliers, in connection with performing our legal obligations concerning pensions dashboards. On specific occasions the Trustee may also share your data with: Appointed covenant advisors who are specialists with knowledge and expertise in assessing the financial strength of the company/organisation supporting the Scheme;
Benefit consultants who provide advice to the Trustee about the design of the Scheme;
Other third parties who provide one-off services such as tracing services where we are unable to locate an individual who we believe has an entitlement under the Scheme, organisations that provide secure data storage or destruction and IT specialists who advise on disaster recovery and cyber security. We can confirm that all third parties with whom we share your data have committed to compliance with the GDPR. However, please see the section relating to transfers of data
later on in this notice. DATA RETENTION
As long as you remain a member of the Scheme with an entitlement to a benefit either for yourself or your beneficiaries or your estate, the Trustee will retain the information necessary to allow it to fulfil its legitimate interests and manage and eventually pay that benefit entitlement. In connection with the pensions dashboard programme, we generate pension identifier codes which link your request with a pension plan you have with us. These codes can be deleted by you if you delete your account with the relevant pensions dashboard. They will also automatically expire if your dashboard account remains inactive for 5 years (or other time scale determined by the MaPS). We also retain on a long-term basis identifier codes which link multiple requests for the same information made by you via a pensions dashboard. The Trustee has a data retention policy which sets out the full details in relation to all the data that is held. YOUR RIGHTS As an individual on whom the Trustee holds personal data you have rights in relation to that data and this Privacy Notice informs and confirms to you those rights. As a data subject, you have the right: to have access to your personal data by writing to the Trustee at the address at the end of this notice and you have the right to have your data transferred to you or another Data Controller in a structured, commonly used and machine readable form;
to have your personal data amended if it is inaccurate or is not complete;
to have your data deleted if there is no legitimate reason for its continued storage or processing; to object to your data being processed and to restrict the processing of your data in certain circumstances; and
Made with FlippingBook - Share PDF online