http___fintexcon.com_politika-na-poveritelnost_1.xml
https___activateevents.com_privacy-policy_.xml
1.1 1.2 2.1 3.1 4.1 5.1 5.2 6.1 7.1 8.1 9.1 10.1 11.1 12.1 12.2 13.1 13.2 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 25.2 26.1 26.2 27.1 28.1 29.1 29.2 29.3 29.4 30.1 30.2 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 44.2 45.1 46.1 47.1 48.1 48.2 49.1 50.1 51.1 51.2 51.3 51.4 52.1 52.2 52.3 53.1 53.2 53.3 54.1 54.2 54.3 55.1 55.2 55.3 55.4 56.1 56.2 57.1 57.2 57.3 58.1 58.2 59.1 59.2 60.1 61.1 62.1 63.1 64.1 65.1 65.2 66.1 67.1
Знаем, че сте загрижени за Вашите лични данни и тяхната употреба, затова ние ги управляваме отговорно. Тази Политика на поверителност ще Ви помогне да разберете какви лични данни събираме, защо ги събираме и какво правим с тях. Кой ги събира? Всякаква лична информация подавана или събирана от нашия уеб сайт се управлява от Финтекс Консултинг ООД. Настоящата Политика на поверителност се отнася до лични данни, събирани от нашия уеб сайт във връзка с услугите и продуктите, които предлагаме. Тази Политика също се прилага към нашето маркетингово съдържание, включващо оферти и реклами за наши продукти и услуги, които ние (или доставчик на услуги от наше име) ви изпращаме през други уеб сайтове, платформи и приложения, съобразно начина, по който използвате информацията в сайта ни. Тези трети страни обикновено имат собствена Политика на поверителност и Ви препоръчваме да се запознаете с нея, преди да ги посещавате. Какви лични данни събираме? Не сте длъжни да предоставяте личните данни, които искаме от Вас, но ако изберете да не ги споделите, ние няма да можем да се свържем с Вас и да ви предоставим продукт или услуга, която сте потърсили от нас или да отговорим на Вашите въпроси. Ние събираме лични данни от различни източници, вкл.: - Лични данни, които ни предоставяте директно от формите ни за контакт, - Лични данни, които събираме автоматично и - Лични данни, които събираме от други източници. Под лични данни се разбира всяка информация, която може да се използва, за да Ви идентифицира директно или индиректно като конкретна личност. Тази дефиниция включва лични данни, събирани офлайн от наши офиси за работа с клиенти, кампании на директен маркетинг, игри, състезания и онлайн чрез наши сайтове и приложения, брандирани страници в платформи на трети страни или приложения на трети страни. Ние ще изискаме и Ваши лични данни, когато се свържете с нас. Може да обединим тези данни с друга информация, за да подобрим нашите продукти, услуги, съдържание и реклама. За какви цели използваме Вашите лични данни? Ние събираме, обработваме и разкриваме Вашите лични данни за следните специфични и ограничени нужди: - За да обработим Ваши плащания, ако поръчате наш продукт; да Ви предоставим информация за статуса на поръчката; да обработим Ваши запитвания, желания и оплаквания; - За да обработим и отговорим на Ваши запитвания или да се свържем с Вас, за да отговорим на Вашите въпроси или желания; - За да развиваме и подобряваме нашите продукти, услуги, методи на комуникация и функционалност на нашия уеб сайт; - За нуждите на състезания и промоции, в които сте взели участие; - За да ви предоставяме информация и управляваме Вашите регистрации и/или абонамент за нашия бюлетин или друг вид комуникация; - За да установим самоличността на лица, които се свързват с нас по телефона, електронен път или друг начин; - За да научим за интересите, желанията и променящите се нужди на клиентите, да подобрим нашия уеб сайт или настоящи продукти и услуги, както и да създадем нови; - За да предоставим персонализирани продукти, комуникация и таргетирана реклама, както и да Ви препоръчаме конкретни продукти, подходящи за Вас. Когато събираме и използваме лични данни за целите, споменати по-горе или за други цели, ние ще Ви уведомим преди или по време на събирането им. Ако е приложимо, ще потърсим Вашето съгласие за обработване на личните Ви данни. Ако дадете съгласие за обработване, Вие имате право да оттеглите съгласието си по всяко време. Ще обработим данните Ви и когато изготвяме договор, в който Вие вземате страна. Необходимо е например да обработим личните Ви данни, за да ви предоставим продукт или услуга, които сте заявили. С кого споделяме лични данни? В глобалния бизнес ние споделяме Ваши лични данни вътрешно-фирмено и с трети страни, с които имаме сключени договорни отношения в следните случаи: Трети страни, доставчици на услуги. За да обработим Ваше запитване или поръчка, да Ви доставим мостри, услуги или материали, заявени през нашия уеб сайт, ние споделяме Вашите лични данни с доставчици на услуги, които работят от наше име като компании, които: поддържат нашия уеб сайт, обработват плащания, анализират данни, предоставят пощенски и куриерски услуги. Те имат достъп до лични данни, необходими за изпълнение на техните услуги, но нямат право да ги използват за други цели. Освен това те са длъжни да обработват тези лични данни в съответствие с тази Политика на поверителност и в съответствие с действащите закони и регулации за защита на лични данни. Правно разкриване. Ние може да предоставим или разкрием Ваши лични данни към трети страни: - За да изпълним договорни задължения; - Когато вярваме, че законът ги изисква за добро; - По искане от правителствени служби, провеждащи разследване; - За да засечем и предотвратим измама или технически или други злоупотреби със сигурността; - За да отговорим на спешен случай - За да защитим правата, собствеността, сигурността или защитата на трети страни, посетители на сайта ни или обществото. Вътрешен обмен на данни Ние споделяме лични данни вътрешно-фирмено или с трети страни за нуждите, описани в настоящата Политика на поверителност. Ние изпращаме данни, събрани само в ограничена правна зона, като Европейската Икономическа Област (EEA) или Азиатско-Тихоокеанското Икономическо Сътрудничество (APEC), към държави, които имат закони за защита на личните данни и се счита, че предоставят необходимите нива на защита в правните зони за следните цели: - За да изпълним Ваши инструкции; - За да се съобразим с правно задължение; - За да работим с наши дилъри, които помагат в разпространението на нашия бизнес и услуги. Как пазим данните Ви? Ние се отнасяме сериозно към сигурността на вашите лични данни. Полагаме всички усилия, за да защитим личните ви данни от неправилна употреба, намеса, загуба, неоторизиран достъп, промяна и разкриване. Нашите мерки включват използване на система за контрол на достъпа, инвестиране в най-новите възможности за защита на мрежите, които ползваме, крипитане, псевдонимизиране и анонимизиране на лични данни, когато е възможно. Достъп до вашите лични данни е разрешен на наши служители и дилъри, когато е необходимо и на трети лица само при наличие на договорни отношения. Колко дълго пазим вашите лични данни? Ние ще пазим личните ви данни толкова дълго, колкото е необходимо за нуждите да бъдат съхраняани. Например, когато прави покупка онлайн при нас, ние пазим данни, свързани с покупката ви, за да можем да изпълним конкретния договор, който възниква при тази покупка, ние ще запазим данните ви за периода, който ни е необходим, за да отговорим на възможни оплаквания, запитвания или притеснения, свързани с поръчката. Ние активно ще преглеждаме вашите лични данни, които съхраняваме и ще ги изтриваме сигурно или в някои случаи ще ги анонимизираме, ако няма легална или бизнес нужда или нужда за потребителя те да бъдат запазени. Какви са Вашите права? Вашите права във връзка с обработката на вашите лични данни. Вие може да упражните тези права по всяко време. По-долу предоставяме списък с тези права и как може да се възползвате от тях. Може да пражните правата си чрез изпращане на имейл или чрез попълване на запитване чрез формата за контакт на страницата Контакти в нашия сайт. - Право на информираност. Имате право да ви бъде предоставена ясна, прозрачна и лесно разбираема информация за това как използваме вашите лични данни и какви са вашите права. Затова ние предоставяме тази информация в този Документ. - Право на достъп и поправка. Имате право на достъп, поправка и обновяване на вашите данни по всяко време. Ние разбираме важността на това и ако искате да упражните това право, моля свържете се с нас. - Право на пренос на данни. Личните данни, които ни предоставяте, са преносими. Това означава, че могат да бъдат премествани, копирани или трансферирани електронно при определени обстоятелства. - Право да бъдете забравени. При определени обстоятелства, вие имате правото да изискате вашите данни да бъдат изтрити. Ко желаете да изтрием вашите лични данни, които съхраняваме, моля уведомете ни и ние ще предприемем мерки да отговорим на Вашата молба според изискванията на закона. Ако вашите лични данни, които съхраняваме, вече не са необходими за никакви цели и не сме задължени по закон да ги пазим, ще направим всичко, което можем да ги изтрием, унищожим или перманентно да ги анонимизираме. - Право на ограничено обработване. При определени обстоятелства, имате право да ограничите обработката на вашите лични данни. - Право на възражение. При определени обстоятелства, имате право да възразите относно определени начини на обработване, вкл. Обработване за директен маркетинг (т.е. получаване на информационни имейли от нас или да се свързваме с вас за различни възможности или оферти, които биха представлявали интерес за вас). - Право да внесете оплакване до супервайзър. Имате право да подадете оплакване директно до всеки локален супервайзър за това как обработваме вашите лични данни. - Право да оттеглите съгласието си. Може да оттеглите съгласието си за обработка на вашите лични данни по всяко време като се свържете с нас. Повече информация и съвети относно вашите права може да получите от Регулатора за защита на лични данни във Вашата държава. Как да се свържете с нас? Можете да се свържете с нас чрез посочените контакти в страницата ни. Ако имате някакви въпроси или притеснения относно нашата Политика на поверителност или относно обработката на данни или ако искате да подадете сигнал/оплакване за възможно нарушение на местните закони за лични данни, моля изпратете ни имейл или попълнете формата за контакт на страницата Контакти в нашия сайт. Как обновяваме политиката си на поверителност? Ние ще обновяваме тази Политика на поверителност, когато е необходимо, за да отговорим на обратната връзка с клиенти и при промени на нашите продукти и услуги. Когато внасяме промени в този Политика на поверителност, ние ще променяме дата на „последна промяна “ в края на тази страница. Ние може да ограничим правата ви в тази политика на поверителност без Ваше съгласие. Последна промяна: март 2020
1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.8 2.1 3.1 3.2 4.1 5.1 6.1 7.1 8.1 9.1 10.1 10.2 10.3 10.4 10.5 11.1 11.2 11.3 11.4 11.5 12.1 12.2 12.3 12.4 12.5 12.6 12.7 12.8 13.1 13.2 13.3 14.1 15.1 15.2 16.1 16.2 16.3 16.4 17.1 17.2 17.3 17.4 18.1 18.2 18.3 18.4 18.5 19.1 19.2 19.3 20.1 20.2 21.1 22.1 22.2 22.3 23.1 23.2 23.3 23.4 24.1 25.1 25.2 25.3 25.4 26.1 26.2 26.3 26.4 26.5 26.6 26.7 26.8 26.9 26.10 26.11 26.12 26.13 26.14 26.15 26.16 26.17 26.18 26.19 26.20 26.21 26.22 26.23 27.1 27.2 28.1 28.2 29.1 29.2 29.3 29.4 29.5 29.6 29.7 29.8 30.1 31.1 31.2 32.1 33.1 34.1 35.1 36.1 37.1 38.1 38.2 38.3 38.4 38.5 39.1 39.2 39.3 39.4 39.5 40.1 40.2 40.3 40.4 40.5 40.6 40.7 40.8 41.1 41.2 41.3 42.1 43.1 43.2 44.1 44.2 44.3 44.4 45.1 45.2 45.3 45.4 46.1 46.2 46.3 46.4 46.5 47.1 47.2 47.3 48.1 48.2 49.1 50.1 50.2 50.3 51.1 51.2 51.3 51.4 52.1 53.1 53.2 53.3 53.4 54.1 54.2 55.1 55.2 55.3 56.1 56.2 57.1 57.2 57.3 57.4 58.1 58.2 59.1 59.2 59.3 60.1 60.2 60.3 61.1 61.2 61.3 62.1 62.2 62.3 63.1 63.2 64.1 64.2 64.3 65.1 65.2 66.1 66.2
This privacy policy sets out how Activate Event Management Ltd (Activate) uses and protects your personal data. Activate is committed to ensuring that your privacy is protected fully and in accordance with applicable legislation. We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last updated on 27.04.2020. It is important that you read this privacy policy together with any other privacy policy or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements the other notices and is not intended to override them. You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance. To contact us in the UK please write to Unit 10, Gleneagles Court, Brighton Road, Crawley, RH10 6AD. Under Article 27 of the GDPR we are required to appoint an EU Representative to act as our data protection agent in the EU. If you would like to report any issues or concerns, or send us a privacy request you can contact our EU Representative at: EU GDPR Representative, INSTANT EU GDPR REPRESENTATIVE LTD 69 Esker Woods Drive, Lucan Co. Dublin, Ireland Dublin office tel: +353 01 554970 Support website [EU and UK]: https://eugdprrep.com Email [EU and UK]: support@gdprteam.freshdesk.com Activate Event Management is an Event Management agency, based in the United Kingdom at 10 Gleneagles Court, Brighton Road, Crawley, West Sussex, RH10 6AD. Telephone Number + 44 (0) 1293 608750, contact email address hello@activateevents.com. Company Registration number 07634279. Tim Weston is the data privacy manager who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about it, including any requests to exercise your legal rights, please contact him on this address hello@activateevents.com Activate organise and project manage a variety of events, such as Conferences and Incentives for its clients. As part of that project management process we may be required to collect personal data. Activate do not collect this personal data for our own Marketing use and only collect personal data when a formal contract exists between the client and ourselves. The personal data we collect is purpose limited and minimised and we will not ask for anything we do not require for our business. This website is not intended for children and we do not knowingly collect data relating to children. We do not use your data for the purpose of data profiling and we will not sell or lease your personal information to third parties unless we are required by law to do so. Consent In specific circumstances we can collect and process your data with your consent, for example when you are asked to provide personal data in connection with the registration process for an event which we are organising on behalf of a client. This consent can only be given by an affirmative action indicated on the appropriate page, which signifies agreement to personal data being processed. Our privacy policy is in place to ensure that you have a clear understanding of who is receiving and what your data is being used for. Should we ask you to provide certain information by which you can be identified when completing a registration, you can be assured that it will only be used in accordance with this privacy policy statement. However, please note that we may process your personal data without your knowledge or consent where this is required by law. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows: We use different methods to collect data from and about you including through:- Recipients of the data we collect for the purpose of providing any services which we have been contractually obligated to provide you by our client may include: our client; Activate Events; Etouches (a registration system provider) Eton Travel (travel services provider) and other third party suppliers such as hotels, ground transport providers. Any shared data will only be processed in a way that is relevant to the purposes for which it was originally collected. We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so, in addition to your consent where this is given. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below. References to legitimate interest means the interest of our business in conducting and managing our business to enable us to provide our services effectively. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us. You may at any time elect not to receive any marketing and advertising from us or limiting it either by contacting us or by opting out in accordance with the directions given in the material you receive. Third Party Marketing We will get your express opt-in consent before we share your personal data with any third party for marketing purposes. We do not share your personal data with any other person for marketing purposes. You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing communications sent to you or by contacting us at any time. Where you opt out of receiving these marketing communications, this will not apply to personal data provided to us for the provision of our services to you. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see. We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. We may have to share your personal data with the parties set out below for the purposes set out in section 8 above. If we are required to transfer your personal data out of the EEA, we must be satisfied before doing so that a similar degree of protection is afforded to it by ensuring that we will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. Before you disclose to us personal data of another person, you must obtain that person’s consent to both the disclosure and the processing of that personal information in accordance with this policy. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. Personal data will be retained for twelve months. Financial data will be retained for six years from the end of a contract or agreement Subject access If you would like to obtain confirmation that your data is being processed and a copy of the data information currently held on you please write c/o Data Access to the above address or email on the above email address. Rectification We want to make sure that your personal information is accurate and up to date. If you believe that any information we are holding on you is incorrect or incomplete, please write to us at the above address or email us on the above email address. We will promptly correct any information found to be incorrect without undue delay and at the latest within one month of request. Portability We will provide you with the required information in a easily machine readable format Revocation You have the right to withdraw your consent (withdrawing your consent does not retrospectively render previous processing unlawful). If you wish to withdraw your consent please write c/o Data Access to the above address or email us on the email address provided. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent. Erasure You may ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. Subject to this, we will take all reasonable steps to notify other data controllers of a data subjects request for erasure. Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following circumstances: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. If you have any questions or comments about how we treat your personal data please contact us directly. If you remain dissatisfied you can contact you local Data Protection Regulator. The regulator in the UK is the Information Commissioners Office (ICO), you can contact the ICO at: ico.org.uk. We are committed to ensuring that your data information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the date information we collect from you. Our website contains links to other websites. This privacy policy only applies to this website so when you link to other websites you should read their own privacy policies. This privacy policy sets out how Activate Event Management Ltd (Activate) uses and protects your personal data. Activate is committed to ensuring that your privacy is protected fully and in accordance with applicable legislation. We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last updated on 27.04.2020. It is important that you read this privacy policy together with any other privacy policy or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements the other notices and is not intended to override them. You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance. To contact us in the UK please write to Unit 10, Gleneagles Court, Brighton Road, Crawley, RH10 6AD. Under Article 27 of the GDPR we are required to appoint an EU Representative to act as our data protection agent in the EU. If you would like to report any issues or concerns, or send us a privacy request you can contact our EU Representative at: EU GDPR Representative, INSTANT EU GDPR REPRESENTATIVE LTD 69 Esker Woods Drive, Lucan Co. Dublin, Ireland Dublin office tel: +353 01 554970 Support website [EU and UK]: https://eugdprrep.com Email [EU and UK]: support@gdprteam.freshdesk.com Activate Event Management is an Event Management agency, based in the United Kingdom at 10 Gleneagles Court, Brighton Road, Crawley, West Sussex, RH10 6AD. Telephone Number + 44 (0) 1293 608750, contact email address hello@activateevents.com. Company Registration number 07634279. Tim Weston is the data privacy manager who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about it, including any requests to exercise your legal rights, please contact him on this address hello@activateevents.com Activate organise and project manage a variety of events, such as Conferences and Incentives for its clients. As part of that project management process we may be required to collect personal data. Activate do not collect this personal data for our own Marketing use and only collect personal data when a formal contract exists between the client and ourselves. The personal data we collect is purpose limited and minimised and we will not ask for anything we do not require for our business. This website is not intended for children and we do not knowingly collect data relating to children. We do not use your data for the purpose of data profiling and we will not sell or lease your personal information to third parties unless we are required by law to do so. Consent In specific circumstances we can collect and process your data with your consent, for example when you are asked to provide personal data in connection with the registration process for an event which we are organising on behalf of a client. This consent can only be given by an affirmative action indicated on the appropriate page, which signifies agreement to personal data being processed. Our privacy policy is in place to ensure that you have a clear understanding of who is receiving and what your data is being used for. Should we ask you to provide certain information by which you can be identified when completing a registration, you can be assured that it will only be used in accordance with this privacy policy statement. However, please note that we may process your personal data without your knowledge or consent where this is required by law. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows: We use different methods to collect data from and about you including through:- Recipients of the data we collect for the purpose of providing any services which we have been contractually obligated to provide you by our client may include: our client; Activate Events; Etouches (a registration system provider) Eton Travel (travel services provider) and other third party suppliers such as hotels, ground transport providers. Any shared data will only be processed in a way that is relevant to the purposes for which it was originally collected. We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so, in addition to your consent where this is given. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below. References to legitimate interest means the interest of our business in conducting and managing our business to enable us to provide our services effectively. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us. You may at any time elect not to receive any marketing and advertising from us or limiting it either by contacting us or by opting out in accordance with the directions given in the material you receive. Third Party Marketing We will get your express opt-in consent before we share your personal data with any third party for marketing purposes. We do not share your personal data with any other person for marketing purposes. You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing communications sent to you or by contacting us at any time. Where you opt out of receiving these marketing communications, this will not apply to personal data provided to us for the provision of our services to you. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see. We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. We may have to share your personal data with the parties set out below for the purposes set out in section 8 above. If we are required to transfer your personal data out of the EEA, we must be satisfied before doing so that a similar degree of protection is afforded to it by ensuring that we will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. Before you disclose to us personal data of another person, you must obtain that person’s consent to both the disclosure and the processing of that personal information in accordance with this policy. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. Personal data will be retained for twelve months. Financial data will be retained for six years from the end of a contract or agreement Subject access If you would like to obtain confirmation that your data is being processed and a copy of the data information currently held on you please write c/o Data Access to the above address or email on the above email address. Rectification We want to make sure that your personal information is accurate and up to date. If you believe that any information we are holding on you is incorrect or incomplete, please write to us at the above address or email us on the above email address. We will promptly correct any information found to be incorrect without undue delay and at the latest within one month of request. Portability We will provide you with the required information in a easily machine readable format Revocation You have the right to withdraw your consent (withdrawing your consent does not retrospectively render previous processing unlawful). If you wish to withdraw your consent please write c/o Data Access to the above address or email us on the email address provided. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent. Erasure You may ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. Subject to this, we will take all reasonable steps to notify other data controllers of a data subjects request for erasure. Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following circumstances: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. If you have any questions or comments about how we treat your personal data please contact us directly. If you remain dissatisfied you can contact you local Data Protection Regulator. The regulator in the UK is the Information Commissioners Office (ICO), you can contact the ICO at: ico.org.uk. We are committed to ensuring that your data information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the date information we collect from you. Our website contains links to other websites. This privacy policy only applies to this website so when you link to other websites you should read their own privacy policies.