For the purposes of this policy data protection law means: (i) until 25 May 2018 the Data Protection Act 1998 and then (ii) from 25 May 2018 and unless and until it is no longer directly applicable in the UK, the General Data Protection Regulation ((EU) 2016/679) (GDPR) and any national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK and then (iii) any successor legislation to the GDPR or the Data Protection Act 1998.
We will comply with data protection law. Personal information we hold about you will be:
WHAT WE COLLECT
We may collect the following information:
HOW WILL WE USE YOUR PERSONAL INFORMATION?
We may use your information:
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
WHAT ARE YOUR RIGHTS?
Right of access - You have the right to obtain confirmation that your data is being processed and access to your personal data. You can make a request by email to firstname.lastname@example.org, or in writing to Customer Service Team, Elivar (UK) Limited, PO Box 71660, London, NW3 9TB, UK
In most cases we will provide a copy of the information free of charge. However, we may charge a reasonable administration fee when a request is manifestly unfounded or excessive or to comply with requests for further copies of the same information although this does not mean that we will charge for all subsequent access requests.
We must without delay and in any event within 1 month of your request (subject to extensions in some cases):
We can extend the time to respond by a further two months where requests are complex or numerous. If this is the case, we will inform you of this within one month of the receipt of the request and explain why the extension is necessary.
Where requests are obviously unfounded or excessive we can refuse to respond. In such cases, we will, within one month, explain why and will inform you of your right to complain to our Supervisory Authority and to pursue a legal remedy.
Data portability – In addition to your access right you can require us to provide a copy of your information that we hold in a commonly used machine-readable format
Rights of Correction and Erasure (“right to be forgotten”) – You may ask us to correct or remove information you think is inaccurate.
Processing for marketing purposes - You may object, at any time, to the processing of your personal data for direct marketing purposes. When you register and every time we get in touch with you, we will offer you the opportunity to opt-out of any service to which you have subscribed. Any e-mail we send you will contain an easy automated opt-out.
Service emails: if you sign up to a promotion or competition that requires an email to complete your journey, or service you with a code or information, we will email you this even if you have opted out of marketing. This is the only email you will receive.
Processing for our legitimate interest - You can object to any processing which is for our legitimate interests or those of a third party in which case, the processing must stop, unless there are compelling legitimate grounds for the processing which override your rights, or where the processing is necessary in relation to legal action.
You can raise an objection, withdraw consent or restrict processing by email to email@example.com, or in writing to Customer Service Team, Elivar (UK) Limited, PO Box 71660, London, NW3 9TB, UK.
Right to Complain - If you have any concerns with how we keep and use your information please contact our Data Protection Officer by email at firstname.lastname@example.org, or in writing to Customer Service Team, Elivar (UK) Limited, PO Box 71660, London, NW3 9TB, UK. You may also complain to our Supervisory Authority, the Information Commissioner’s Office by using their livechat service via their website at https://ico.org.uk/global/contact-us/live-chat or by phone on 0303 123 1113 or, where different, the Supervisory Authority where your data has been processed. We will advise you of this where appropriate.