Semley Auctioneers Limited is committed to protecting the privacy and security of your personal data.
Semley Auctioneers Limited (hereinafter called ‘Semley Auctioneers’, ‘we’ or ‘us’) act as a 'controller' of your personal data and operate under the Data Protection Act 1998 and the General Data Protection Regulation 2018 (GDPR).
This policy is effective from May 25th 2018, and may be updated or altered from time to time. You will be notified of significant changes by your elected preferred method of contact.
How we collect your personal data
We collect your personal information directly from you when you contact us in relation to the services we provide, for example by a person-to-person meeting, by telephone, by written correspondence, by social media, by email or through our website. We may also collect your personal data from third parties such as online bidding platforms, or persons or organizations appointed in connection with our services, for example carriers or restorers, or other auction houses or persons acting as referees prior to us providing a service to you.
Types of information we collect
The personal data we collect may include
- your name and contact details including address, telephone number and email address.
- your personal identification documents, including copies of government-issued identification such as passport and driving licence which are required to register bidders (or when we need to verify details of a vendor).
- closed circuit television (CCTV) images when you visit our offices and salerooms. We use CCTV for the protection of our staff, our clients and the property that we sell. We also video our auctions for security reasons and to monitor bidding practices.
- account details and other information relating to your transactions/dealings with us and your use of our services.
- financial information such as bank account and payment card details. Please note that this information is only used for the purposes of payment.
- credit and payment history (where you open an account with us as a buyer or bidder).
- non-identifiable information such as website statistics
Please note that where our processing of your personal data relies on your consent and where you then withdraw that consent, we may not be able to provide all or some aspects of our Services to you and/or it may affect the provision of our Services.
Lawful basis for use of your personal data
We only use your personal data lawfully, on one or more of the following bases
- contract, where we need your personal information to perform the contract we have with you
- legitimate interests, our legitimate interests and those of third parties, but not where your fundamental rights take precedence over our legitimate interests
- legal or regulatory obligation, such as criminal investigation, tax reporting requirements or identity checks
- consent, but only where you have given us your express consent, primarily for marketing purposes. This consent may be withdrawn at any time, but it should be noted that we may not be able to provide all our services if this consent is withdrawn.
How and why we use your personal data
We require your personal data to fulfil your request or the contract for our services, or to improve our services. This may be in the form of spoken, written, printed or electronic correspondence or forms regarding services we provide, items consigned for sale or valuation, items of interest to you as a prospective bidder or purchased by you through our services. In this respect we may also provide this data to third parties, for example, our online bidding platform providers, our technical providers, our professional advisors, carriers, house clearance providers, or debt collection agencies. All our third parties are required to to take appropriate measures to ensure the security of your personal data.
We will not pass on your personal information to third parties for marketing purposes.
How long we store your personal data for
We will retain your personal data for as long as we are providing you with the services requested or contracted, and for as long as is required for tax, legal and other regulatory requirements, to protect and defend against potential legal claims, and our legitimate business purposes after the termination of your account or agreement with us, or if your application for a particular service is otherwise terminated. Closed circuit television images taken when you attend our premises will be retained for a few months.
What steps do we take to keep your personal data secure?
We take all reasonable and appropriate steps to protect the security and integrity of personal information provided to us via documentation, electronic or other means.
We use a variety of security technologies and procedures to help protect your personal details from unauthorised physical and electronic access.
Semley Auctioneers is fully PCI compliant.
Your legal rights
Under the DPA you have the following rights:
- to obtain access to, and copies of, the personal data that we hold about you
- to require that we cease processing your personal data if the processing is causing you damage or distress
- to require us not to send you marketing communications.
Once GDPR takes effect on 25 May 2018, you will also have the following additional rights:
- to require us to correct the personal data we hold about you if it is incorrect
- to require us to erase your personal data
- to require us to restrict our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal)
- to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller
- to object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.
As effective as modern security practices are, we cannot guarantee the complete security of personal data held in our systems, nor that that information you supply through the internet or any computer network is entirely safe from unauthorised intrusion, access or manipulation during transmission. We will not be liable for any resulting misuse of your personal data.
Given that the Internet is a global environment, using the Internet to collect and process personal data necessarily involves the transmission of data on an international basis. Therefore, by browsing this website and communicating electronically with us, you acknowledge and agree to our processing of personal data in this way. Transmission of information over the internet is not entirely secure, and if you submit any information to us over the internet, whether by email, via our website or by other means, you do so entirely at your own risk. We cannot be responsible for any costs, expenses, loss of profits, and harm to reputation, damages, liabilities or any other form of loss or damage suffered by you as a result of your decision to transmit information to us by such means.
The data controller is Semley Auctioneers Limited, a limited company registered in England and Wales, company registration number 5136578, whose registered address is Station Road, Semley, Shaftesbury, Dorset SP7 9AN. You can contact the data controller by writing to the registered address or emailing firstname.lastname@example.org or by telephone on 01747 855122.
If you are not satisfied with how we are processing your personal data, you can raise a concern with the Information Commissioner. You can also find out more about your rights under data protection legislation from the Information Commissioner's Office website available at: www.ico.org.uk.