Privacy Notice: Part 2 - Suppliers
This Privacy Notice - Part 2 Suppliers sets out details of our processing of our suppliers’ personal information through the Authority’s tender, supplier or onboarding processes. It should be read in conjunction with part 1 of the privacy notice.
1. Controller of your information
Lee Valley Regional Park Authority (“We” or the “Authority”) are the controller of your personal information. Where we legitimately share your information outside of the Authority, the recipient organisation may either be the processor or joint controller, depending on the circumstances and subject to appropriate safeguards and controls.
2. Where we get your information from
Your information may be collected in a variety of ways.
3. Information we collect about you
The following table sets out:
-
The personal information about you that we may hold or process.
-
The purposes for which your personal information may be held and processed.
-
The lawful basis under which your personal information may be held and processed.
-
Where any personal information is special category information, the special condition(s) relied upon.
-
Where any personal information relates to criminal convictions and offences, whether provided by you or by other sources, the special condition relied upon.
See part 1 of this privacy notice for further information about the lawful bases for processing your personal information and the special conditions applicable to the processing of special category information and information relating to criminal convictions and offences.
4. Who we share your information with
Your personal information may be shared internally within the Authority with individuals who are required to receive it for legitimate business purposes according to their role.
Your information may be shared externally, depending on the circumstances. Where this is the case, the types of organisations with whom your information is shared and the purpose for which it is shared are shown in the following table.
5. Where your information will be stored
Your information will be stored securely in a range of different places in the Authority’s information management systems, including email. Your personal information will also be stored securely in a third party electronic tendering process system hosted in the cloud.
6. How long we keep your information for
Your personal information be held for no longer than the applicable statutory limitation periods unless we are required to hold it for longer in for the purpose of ongoing legal proceedings.
7. International transfers
See part 1 of this privacy notice for information about international transfers of your personal information.
8. Changes and updates to this privacy notice
We may change this privacy notice (parts 1 and/or 2) from time to time without notice to you. Any changes will apply to you and your data immediately. If these changes significantly affect how your personal information is processed, we will take reasonable steps to let you know.
This privacy notice was last updated in January 2025.