Data Privacy

DATA PROTECTION NOTICE UNDER THE CAYMAN ISLANDS DATA PROTECTION LAW, 2017

This is only intended to be a summary of the key points in the Data Protection Law, 2017 which take effect from September 30, 2019.
If you need further information, please contact the German Consular Solutions (GCS) by e-mailing mk@con-sul.com.

The purpose of this notice is to explain how and why the German Consular Solutions (“GCS”) and employees of the GCS may use, store, share and otherwise process your personal data.  
Personal Data covers any type of information that can be used to identify and individual. This may be an individual’s name, address, email address, date of birth, passport details or other national identifier, driving licence number, employment information, account numbers, credit card details, history of involvement with GCS, police clearance certificate, economic information such as your work permit information, and information required to maintain an employment relationship with GCS. It also includes data which, when looked at with other data, enables an individual to be identified, such as an IP address.

Personal information does not include information that cannot be tracked back to you personally. This Notice is subject to change due to changes in organizational practices or legal and regulatory requirements. You are encouraged to periodically check the website for updates to this Notice.

What role does the GCS perform in relation to your Personal Data?

The GCS both controls the Personal Data which it receives and processes the Personal Data. The GCS will decide:
(i) how to use, store, and process your Personal Data;
(ii) with whom to share your Personal Data;
(iii) when to change or delete your Personal Data; and,
(iv) who may process your Personal Data.

How does the GCS we obtain your Personal Data?

The GCS collects your Personal Data a number of ways. These include: from any forms you complete which have been provided to you by the GCS, examples include the contact form on the GCS’s website, as a client, as a consequence of your employment with GCS, when you provide your Personal Data in correspondence and conversations (including by email).

Why is your Personal Data processed?

The principal reason why Personal Data is processed is to assist the GCS to carry out its functions.
For example; employing staff, arranging meetings, assisting clients, etc. Further it may be necessary in order for the GCS to comply with applicable legal or regulatory obligations, including but not limited to undertaking due diligence checks on staff i.e. police clearance certificates, carrying out  anti-money laundering and counter-terrorist financing checks, complying with requests from regulatory, governmental, tax and law enforcement authorities, maintaining statutory registers, initiating controls to prevent and detect fraud, sending updates, information and notices or otherwise corresponding with you in connection with your involvement with the GCS, investigating any complaints, or pursuing or defending any claims, proceedings or disputes, managing operations, complying with audit requirements, ensuring internal compliance with the GCS’s policies and procedures; but in all cases only where it is considered that the processing is necessary and, on balance, the legitimate interests of the GCS do not override your legitimate interests, rights or freedoms.

When requested for a legitimate purpose, as set out above your Personal Data may be shared with parties outside of the GCS. In exceptional circumstances, your Personal Data may be shared with regulatory, prosecuting and other governmental agencies or departments. Your Personal Data will not be sold, rented or traded.

Do you have to provide this Personal Data?

When an individual chooses to become an employee they are consenting to the collection, use and disclosure of the individual’s Personal Date in accordance with this Privacy Notice. The GCS may seek additional consent where required by law or in situations where it is considered that further consent to be necessary or appropriate.

An individual is free to refuse or withdraw their consent to the collection, use or disclosure of their Personal Data at any time upon reasonable notice in writing to the GCS. An employee or a client of the GCS may decline to provide to the GCS with their Personal Data but, in some circumstances, this decision may hinder the GCS in its ability to employ and provide services.

How long is Personal Data retained

The GCS will keep your Personal Data for as long as it is required for legitimate business purposes, to perform contractual obligations, or where required by law or regulation. The GCS will generally retain your Personal Data throughout the lifecycle of the relationship. Some Personal Data will be retained after your relationship ends. The GCS expects to delete your Personal Data (at the latest) once there is no longer any legal or regulatory requirement or legitimate business purpose for retaining your Personal Data.

What are your rights in respect to your Personal Data

You have certain data protection rights, including:
(i) the right to be informed about the purposes for which your Personal Data are processed;
(ii) the right to access your Personal Data;
(iii) the right to stop direct marketing;
(iv) the right to restrict the processing of your Personal Data;
(v) the right to have incomplete or inaccurate Personal Data corrected;
(vi) the right to ask the GCS to stop processing your Personal Data;
(vii) the right to be informed of a Personal Data breach (unless the breach is unlikely to be prejudicial to you);
(viii) the right to complain to the Data Protection Ombudsman; and,
(ix) the right to require the GCS to delete your Personal Data in some limited circumstances.

Contact us

The GCS are committed to processing your Personal Data lawfully and to respecting your data protection rights. Please contact the GCS if you have any questions about this notice or the Personal Data held about you. Contact the Executive Director at mk@con-sul.com.