At DAH we hold personal data for "as long as is necessary" to adhere to our
statutory and contractual obligations and in line with our legitimate interests as
a data controller. "As long as necessary" considers data processing of holiday bookings
as well as to comply with financial services regulations (e.g. accounting and tax).
The GDPR introduces a right for Data Subjects to have personal data erased.
This is known as 'the right to be forgotten'. A request to delete personal data
should be made by email. Please email your request to firstname.lastname@example.org.
When we receive a delete request we may require further identity verification or
to clarify your request. In order to fulfil our legitimate interests as data controller,
we may refuse your delete request based on the "as long as necessary" obligation
DAH will delete personal data after the "as long as necessary" period if we have
not had any meaningful contact with the Data Subject or if we do not hold any records
on you that are in our legitimate interests to keep. "Meaningful contact" means
contact that adds to the information we already have about you.
We also keep all payroll records, holiday pay, sick pay and pension's
auto-enrolment records for as long as is legally required by HMRC and associated
national minimum wage, social security and tax legislation.