{
    "document_id": 11962,
    "page": 16,
    "width_pt": 595.32,
    "height_pt": 841.92,
    "rotation": 0,
    "pipeline_version": "paddleocr-vl-1.6+paul-48",
    "engine": "paddleocr_vl",
    "source_run_id": 12073,
    "item_count": 28,
    "counts_by_type": {
        "figure": 2,
        "footer": 2,
        "form_field": 1,
        "header": 1,
        "heading": 4,
        "text": 18
    },
    "build_ms": 5,
    "items": [
        {
            "id": "p16.1",
            "order": 1,
            "type": "figure",
            "bbox": {
                "l": 71.5056,
                "t": 841.4401,
                "r": 125.7347,
                "b": 799.2122
            },
            "text": "",
            "attrs": {
                "role": "page_header",
                "block_label": "header_image"
            }
        },
        {
            "id": "p16.2",
            "order": 2,
            "type": "header",
            "bbox": {
                "l": 209.2378,
                "t": 798.7323,
                "r": 385.1224,
                "b": 786.0159
            },
            "text": "Privacy and Data Protection Statement",
            "attrs": {
                "block_label": "header"
            },
            "level": 2
        },
        {
            "id": "p16.3",
            "order": 3,
            "type": "figure",
            "bbox": {
                "l": 472.9447,
                "t": 840.0005,
                "r": 523.0946,
                "b": 799.4521
            },
            "text": "",
            "attrs": {
                "role": "page_header",
                "block_label": "header_image"
            }
        },
        {
            "id": "p16.4",
            "order": 4,
            "type": "heading",
            "bbox": {
                "l": 68.8661,
                "t": 762.7426,
                "r": 312.1771,
                "b": 748.3467
            },
            "text": "2.12 Addressing Compliance to the GDPR",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p16.5",
            "order": 5,
            "type": "text",
            "bbox": {
                "l": 69.586,
                "t": 730.3518,
                "r": 481.5829,
                "b": 702.2798
            },
            "text": "The following actions are undertaken to ensure that WTCG complies with the accountability principle of the GDPR:"
        },
        {
            "id": "p16.6",
            "order": 6,
            "type": "text",
            "bbox": {
                "l": 87.5823,
                "t": 689.3235,
                "r": 468.1456,
                "b": 675.6474
            },
            "text": "The legal basis for processing personal data is clear and unambiguous"
        },
        {
            "id": "p16.7",
            "order": 7,
            "type": "text",
            "bbox": {
                "l": 104.6189,
                "t": 674.6877,
                "r": 523.5745,
                "b": 647.3355
            },
            "text": "All staff involved in handling personal data understand their responsibilities for following good data protection practice"
        },
        {
            "id": "p16.8",
            "order": 8,
            "type": "text",
            "bbox": {
                "l": 105.5787,
                "t": 645.8959,
                "r": 408.6376,
                "b": 632.4597
            },
            "text": "Training in data protection has been provided to all staff"
        },
        {
            "id": "p16.9",
            "order": 9,
            "type": "text",
            "bbox": {
                "l": 105.5787,
                "t": 631.2601,
                "r": 396.1601,
                "b": 617.5839
            },
            "text": "Where applicable, Rules regarding consent are followed"
        },
        {
            "id": "p16.10",
            "order": 10,
            "type": "text",
            "bbox": {
                "l": 103.1792,
                "t": 617.344,
                "r": 524.0544,
                "b": 589.9918
            },
            "text": "Routes are available to data subjects wishing to exercise their rights regarding personal data and such enquiries are handled effectively"
        },
        {
            "id": "p16.11",
            "order": 11,
            "type": "text",
            "bbox": {
                "l": 87.3424,
                "t": 588.3123,
                "r": 462.8667,
                "b": 574.6362
            },
            "text": "Regular reviews of procedures involving personal data are carried out"
        },
        {
            "id": "p16.12",
            "order": 12,
            "type": "text",
            "bbox": {
                "l": 103.8991,
                "t": 572.4768,
                "r": 512.5367,
                "b": 546.3243
            },
            "text": "Privacy by design is adopted for all new or changed systems and processes. The following documentation of processing activities is recorded:"
        },
        {
            "id": "p16.13",
            "order": 13,
            "type": "text",
            "bbox": {
                "l": 123.0952,
                "t": 544.4048,
                "r": 365.2064,
                "b": 531.4485
            },
            "text": "Organization name and relevant details"
        },
        {
            "id": "p16.14",
            "order": 14,
            "type": "text",
            "bbox": {
                "l": 123.3351,
                "t": 530.7287,
                "r": 350.3294,
                "b": 517.7724
            },
            "text": "Purposes of the personal data processing"
        },
        {
            "id": "p16.15",
            "order": 15,
            "type": "text",
            "bbox": {
                "l": 123.5751,
                "t": 518.0123,
                "r": 431.9129,
                "b": 504.3362
            },
            "text": "Categories of individuals and personal data processed"
        },
        {
            "id": "p16.16",
            "order": 16,
            "type": "text",
            "bbox": {
                "l": 123.5751,
                "t": 503.8564,
                "r": 345.5304,
                "b": 490.9001
            },
            "text": "○ Categories of personal data recipients",
            "children": [
                {
                    "id": "p16.16.1",
                    "order": 17,
                    "type": "form_field",
                    "bbox": {
                        "l": 123.58,
                        "t": 503.86,
                        "r": 135.58,
                        "b": 491.86
                    },
                    "text": "",
                    "attrs": {
                        "field_kind": "radio",
                        "label": "○ Categories of personal data recipients",
                        "source": "glyph_estimate",
                        "bbox_estimated": true,
                        "label_source": "parent_text",
                        "label_ref": "p16.16",
                        "text_offset": 0,
                        "text_span": 1
                    }
                }
            ]
        },
        {
            "id": "p16.17",
            "order": 18,
            "type": "text",
            "bbox": {
                "l": 123.5751,
                "t": 491.3799,
                "r": 515.4161,
                "b": 462.1083
            },
            "text": "o Agreements and mechanisms for transfers of personal data to non-EU countries including details of controls in place"
        },
        {
            "id": "p16.18",
            "order": 19,
            "type": "text",
            "bbox": {
                "l": 123.3351,
                "t": 463.3079,
                "r": 332.333,
                "b": 450.8315
            },
            "text": "Personal data retention schedules"
        },
        {
            "id": "p16.19",
            "order": 20,
            "type": "text",
            "bbox": {
                "l": 123.0952,
                "t": 450.1117,
                "r": 439.5914,
                "b": 435.9557
            },
            "text": "o Relevant technical and organisational controls in place"
        },
        {
            "id": "p16.20",
            "order": 21,
            "type": "text",
            "bbox": {
                "l": 69.1061,
                "t": 422.2796,
                "r": 523.8144,
                "b": 393.7278
            },
            "text": "These actions will be reviewed biannually as part of the management review process of the information security management system."
        },
        {
            "id": "p16.21",
            "order": 22,
            "type": "heading",
            "bbox": {
                "l": 69.1061,
                "t": 374.5332,
                "r": 177.3243,
                "b": 360.8571
            },
            "text": "2.13 Data Deletion",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p16.22",
            "order": 23,
            "type": "heading",
            "bbox": {
                "l": 98.6201,
                "t": 354.8588,
                "r": 195.5606,
                "b": 340.223
            },
            "text": "Hard Copy Data.",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p16.23",
            "order": 24,
            "type": "text",
            "bbox": {
                "l": 97.6603,
                "t": 334.2247,
                "r": 511.3369,
                "b": 292.7166
            },
            "text": "We aspire to operate as a paperless business. We do however receive some paper records from third parties and these may contain personal data. All paper documentation is shredded and disposed of."
        },
        {
            "id": "p16.24",
            "order": 25,
            "type": "heading",
            "bbox": {
                "l": 98.3802,
                "t": 287.678,
                "r": 259.3877,
                "b": 273.2821
            },
            "text": "Soft Copy / Electronic Data.",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p16.25",
            "order": 26,
            "type": "text",
            "bbox": {
                "l": 97.6603,
                "t": 267.0439,
                "r": 509.1774,
                "b": 211.3797
            },
            "text": "Subject to the data retention policy set out in table 2 below, we have a thorough and complete approach to deleting data from all data sources including but not limited to database tables, temporary files, log files and any other locations where personal data may exist."
        },
        {
            "id": "p16.26",
            "order": 27,
            "type": "footer",
            "bbox": {
                "l": 71.2656,
                "t": 23.0334,
                "r": 82.7833,
                "b": 12.9563
            },
            "text": "16",
            "attrs": {
                "block_label": "number"
            }
        },
        {
            "id": "p16.27",
            "order": 28,
            "type": "footer",
            "bbox": {
                "l": 89.502,
                "t": 22.7935,
                "r": 120.6957,
                "b": 12.2365
            },
            "text": "Page",
            "attrs": {
                "block_label": "footer"
            }
        }
    ],
    "excluded_furniture": {
        "first": [],
        "last": []
    }
}