This Data Protection Statement provides information about the ways in which I collect, store and use personal data relating to individuals (data subjects). This Data Protection Statement relates to personal data I receive where data subjects contact, or request information from me directly, or personal data I receive in relation to the leadership, coaching or compliance services provided.  

I am a leadership, coaching and compliance consultant, Willa Mawhinney, set up as a limited company Willa Empower Ltd, Company number NI680964, registered address 146 High St, Holywood, Co Down, N Ireland, BT18 9HS.  

I am the data controller for the personal data I process. You can contact me at willa.mawhinney@outlook.com.

I process personal data in the context of providing leadership, coaching and compliance consultancy services. The personal data that I process includes (i) basic personal information, such as your name / surname and the company or organisation you work for; (ii) contact information, such as your email address and phone number(s); and (iii) any other personal data that is provided to me during the course of providing leadership, coaching or compliance services. In processing personal data I: 

(a) comply with all obligations under Data Protection Legislation;

(b) implement and maintain appropriate technical and organisational measures to ensure a level of security appropriate to the risk; 

(c) promptly and without undue delay, notify you if I become aware of an actual or suspected personal data breach (as defined in the GDPR) with respect to the personal data, that will or is likely to have an adverse impact on you or your business, and in each case I shall provide you with such assistance and cooperation as is reasonably requested by you in order to address and resolve the complaint, notice, communication or personal data breach; 

(d) deal with and respond to Data Subject requests, enquiries or complaints (including any request by a Data Subject to exercise their rights under Data Protection Legislation) I receive and that relate to the Personal Data I process.

Your data will be retained for the period I provide services to you, and for a period of one year after we complete our work together.  You have the right to request access to the personal information I hold about you, the right to rectify the personal data I hold, the right to erasure, the right to restrict processing, the right to data portability, the right to object to processing and the right to lodge a complaint with a data protection supervisory authority.

The GDPR came into force on 25 May 2018 and significantly changed data protection law in Europe, strengthening the rights of individuals and increasing the obligations on organisations. The GDPR is designed to give individuals more control over their personal data. (A copy of the GDPR is available here).

The key principles relating to the processing of personal data under the GDPR are lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability. 

Although the GDPR is directly applicable as a law in all Member States, it allows for certain issues to be given further effect in national law.