Both

We are the Operator regarding the data captured by ATG devices at the sites of our customers

We are the Responsible Party regarding the data we collect through our normal business operations (Customer, Supplier, Staff)

Yes we are, as both an Operator and a Responsible Party

Yes, as an Operator regarding the data we collect on behalf of customers

Yes we do, and this IO will also need to be registered with the Regulator

Yes, in order to show how we intend to handle requests for information

Yes we do

• Scanned Data from Customer Sites

• Customer Data (Names, Reg Numbers, Banking Details, Contact Details)

• Supplier Data (Names, Reg Numbers, Banking Details, Contact Details)

• Staff Data (Names, ID Numbers, Bank Details, Special Personal Information, Contact Details)

Yes

Yes

Yes

Only for the information we gather as the Responsible Party

For the information we collect as an Operator, our customer will determine the Retention Periods.