Privacy Policy

Data Protection Notice

Onyx Capital Group as a Data Controller, have an obligation under GDPR to inform individual Data Subjects of their rights in relation to data held about them.

a) What information is being collected

For the purposes mentioned in the following paragraph “Why it is being collected” we collect the following categories of personal data:

  • Name
  • Contact details (Email address and Phone number)
  • Employer and Job title

b) Why it is being collected

Purpose: Marketing
Lawful basis: Consent

All the data you provide to us will be processed subject to the restrictions and for the purposes pointed out in this notice, namely:

  • To advise you through e-mail, in the framework of ordinary commercial relationship, about other products or services similar to those subject matters of this contract. (legal basis for processing as per lawfulness condition is your consent as stated at art. 6 (a) of the General Data Protection Regulation 2016/679).
  • From time to time we would like to contact you about events or conferences or seminars organised/sponsored by us or about our new services/products reaching you by email (legal basis for processing as per lawfulness condition is your consent as stated at art. 6 (a) of the General Data Protection Regulation 2016/679)

The provision of data is discretionary however a lack of data can be an impediment to the exchange of information necessary for the above purposes.

Purpose: Contract fulfillment and legal obligations
Lawful basis: Contract/Legal obligation/Legitimate interests

All the data you provide to us will be processed subject to the restrictions and for the purposes pointed out in this notice, namely:

  1. For the performance of the contract and the complete fulfilment of any contractual obligation we have with you and/or your Company (legal basis for processing as per lawfulness condition is a contract as stated at art. 6 (b) of the General Data Protection Regulation 2016/679)
  2. For complying with obligations provided by laws, current regulations and European legislation (e.g. tax regulations) (legal basis for processing as per lawfulness condition is legal obligation as stated at art. 6 (c) of the General Data Protection Regulation 2016/679)
  3. For legitimate business purposes to advise you through e-mail, in the framework of ordinary commercial relationship, about other products or services similar to the subject matter of this contract and that we think will be of interest to you. (legal basis for processing as per lawfulness condition is our legitimate interests as stated at art. 6 (F) of the General Data Protection Regulation 2016/679).

Whenever we process your Personal Data for a Legitimate Interest we will ensure always to take account of your rights and to balance our interests with them. You can obtain evidence of the Legitimate Interests Assessment we conducted to determine if we can rely on Legitimate Interests for processing your Personal Data. You have the right to object to this processing if you wish. Please bear in mind that if you object this will affect our ability to provide the above-mentioned advice and services for your benefit.

The provision of data is discretionary however a lack of data can be an impediment to the exchange of information necessary for the execution of the contract. You (natural persons to which the data refers) have the right to determine how we use your data and to oppose to the purposes of processing at any time.

c) Who is collecting data

Data will be collected by Onyx Capital Group (the “Data Controller”), with business address Portland House, Bressenden Place, Westminster, London, SW1E 5RS.

The Compliance Department of our Firm can be contacted by the following methods:​

  1. Email: info@onyxcapitalgroup.com,
  2. Telephone: +44 20 8282 6200; or
  3. Post: Onyx Capital Group, Portland House, Bressenden Place, Westminster, London, SW1E 5RS

d) How data is processed

Personal data is processed both manually and electronically in accordance with the above-mentioned purposes and, in any case, in order to guarantee data security and data confidentiality in compliance with current regulations. Our Employees can access your data. Our Employees are appropriately designated and trained to process data only according to the instructions we provide them. All the data will be processed until the withdrawal of consent or at the end of a defined retention period (v).

e) How data is stored and with whom it could be shared

Data is recorded on paper and IT systems. Basic personal data (Name, Email, Contact Number) will be stored on our CRM system which is accessible to restricted individuals for the above-mentioned purposes.

Data may reside on shared IT systems with one of our group companies, who will be able to access the data for the above-mentioned purposes.

The group complies with the data protection policy rules of the Privacy Shield by assuming the data protection obligations therein established www.onyxcapitalgroup.com/privacy-policy.

We may disclose your Personal Data with authorised service providers who perform services for us (including background checks and KYC, cloud services, data storage, payment processing, customer support and bill collection). Our contracts with our service providers include commitments that they agree to limit their use of Personal Data to our specific instructions and to comply with privacy and security standards.

Without prejudice to any communications made to comply with legal or contractual obligations, data may also be disclosed to external parties as required by laws or regulations (e.g. court, tribunal, Regulatory Authority or Governmental Entity).

When we share your information with other entities within our group or contracted Third Party companies we take all reasonable steps to ensure that your information and privacy are protected in line with the applicable legal obligations.

Data will be stored for a period of 10 years from the date of last successful contact or the end of the commercial relationship unless consent is withdrawn or an erasure request is made.

f) Your rights and how to exercise them

You (natural persons to which the data refers) have the right to determine how we use your data and to oppose to the purposes of processing at any time. You have the right to withdraw your consent at any time, without affecting the lawful processing of data based on consent up to the point of its withdrawal.

We remind you that you have the right to request from us access to and rectification or erasure of personal data, or a restriction of processing, or to object to the processing of data concerning you.

You also have the right to receive your personal data that you provided to us in a structured, commonly used and machine-readable format and have the right to transmit such data to another controller without hindrance from us. In exercising your right to data portability, you have the right to have your personal data transmitted directly from a controller to another, where technically feasible.

You can contact us to exercise your rights at the address mentioned in the previous section no. (iii) sending an email to info@onyxcapitalgroup.com or contacting the dedicated phone line +44 20 8282 6200 or going to the website www.onyxcapitalgroup.com or directly contacting the Compliance Department at the contact details indicated above.

If you consider that the processing of your personal data infringes applicable data protection laws, as data subject you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular, in the Member State of your habitual residence, place of work or place of the alleged infringement.

The Supervisory Authority for the Member State we are located in/your data is processed in is the Information Commissioners Office (ICO) who can be contacted via their hotline 0303 123 1113 or through the Concerns section of their website, https://ico.org.uk/concerns/.​