CHERRYTREE FARM CAMPING WEBSITE AND MARKETING PRIVACY NOTICE

Transcription

1 CHERRYTREE FARM CAMPING WEBSITE AND MARKETING PRIVACY NOTICE INTRODUCTION Welcme t the Cherry Tree Farm Camping's privacy ntice. Cherry Tree Farm Camping respects yur privacy and is cmmitted t prtecting yur persnal data. This privacy ntice will infrm yu as t hw we lk after yur persnal data when yu visit ur website (regardless f where yu visit it frm) and tell yu abut yur privacy rights and hw the law prtects yu. 1. IMPORTANT INFORMATION AND WHO WE ARE Purpse f this privacy ntice This privacy ntice aims t give yu infrmatin n hw Cherry Tree Farm Camping cllects and prcesses yur persnal data thrugh yur use f this website, including any data yu may prvide thrugh this website, fr example when yu cntact us. This website is nt intended fr children and we d nt knwingly cllect data relating t children, except fr the age range f children as part f the bking prcess. It is imprtant that yu read this privacy ntice tgether with any ther privacy ntice r fair prcessing ntice we may prvide n specific ccasins when we are cllecting r prcessing persnal data abut yu s that yu are fully aware f hw and why we are using yur data. This privacy ntice supplements the ther ntices and is nt intended t verride them. Cntrller Cherry Tree Farm Camping is the cntrller and respnsible fr yur persnal data (cllectively referred t as " Cherry Tree Farm Camping ", "we", "us" r "ur" in this privacy ntice). Cherry Tree Farm Camping perates the website: We have appinted a Data Privacy Manager wh is respnsible fr verseeing questins in relatin t this privacy ntice. If yu have any questins abut this privacy ntice, including any requests t exercise yur legal rights, please cntact the Data Privacy Manager using the details set ut belw. Cntact details Name: Cherry Tree Farm Camping Name r title f Data Privacy Manager: Hayley Charleswrth address: cherrytreefarmcampsite@gmail.cm Telephne:

2 Cmplaints Yu have the right t make a cmplaint at any time t the Infrmatin Cmmissiner's Office (ICO), the UK supervisry authrity fr data prtectin issues ( We wuld, hwever, appreciate the chance t deal with yur cncerns befre yu apprach the ICO s please cntact us in the first instance. Changes t the privacy ntice and yur duty t infrm us f changes This versin was last updated in June 2018 and histric versins can be btained by cntacting us. It is imprtant that the persnal data we hld abut yu is accurate and current. Please keep us infrmed if yur persnal data changes during yur relatinship with us. Third-party links This website may include links t third-party websites, plug-ins and applicatins. Clicking n thse links r enabling thse cnnectins may allw third parties t cllect r share data abut yu. We d nt cntrl these third-party websites and are nt respnsible fr their privacy statements. When yu leave ur website, we encurage yu t read the privacy ntice f every website yu visit. 2. THE DATA WE COLLECT ABOUT YOU Persnal data, r persnal infrmatin, means any infrmatin abut an individual frm which that persn can be identified. It des nt include data where the identity has been remved (annymus data). We may cllect, use, stre and transfer different kinds f persnal data abut yu which we have gruped tgether fllws: Identity Data includes first name and last name. Cntact Data includes address, address and telephne number. Usage Data includes infrmatin abut hw yu use ur website. We als cllect, use and share Aggregated Data such as statistical r demgraphic data fr any purpse. Aggregated Data may be derived frm yur persnal data but is nt cnsidered persnal data in law as this data des nt directly r indirectly reveal yur identity. Fr example, we may aggregate yur Usage Data t calculate the percentage f users accessing a specific website feature. Hwever, if we cmbine r cnnect Aggregated Data with yur persnal data s that it can directly r indirectly identify yu, we treat the cmbined data as persnal data which will be used in accrdance with this privacy ntice. We d nt cllect any Special Categries f Persnal Data abut yu (this includes details abut yur race r ethnicity, religius r philsphical beliefs, sex life, sexual rientatin, plitical pinins, trade unin membership, infrmatin abut yur health and genetic and bimetric data). Nr d we cllect any infrmatin abut criminal cnvictins and ffences. 2

3 3. HOW IS YOUR PERSONAL DATA COLLECTED? We use different methds t cllect data frm and abut yu including thrugh: Direct interactins. Yu may give us yur Identity and Cntact Data by cntacting us r requesting marketing t be sent t yu; Third parties r publicly available surces. We may receive persnal data abut yu frm varius third parties and public surces as set ut belw: Identity and Cntact Data frm cmpetitin rganisers wh cllect yur data when yu enter a cmpetitin fr example 4. HOW WE USE YOUR PERSONAL DATA We will nly use yur persnal data when the law allws us t. Mst cmmnly, we will use yur persnal data in the fllwing circumstances: 1. Where it is necessary fr ur legitimate interests (r thse f a third party) and yur interests and fundamental rights d nt verride thse interests. Legitimate Interest means the interest f ur business in cnducting and managing ur business t enable us t give yu the best service and the best and mst secure experience. We make sure we cnsider and balance any ptential impact n yu (bth psitive and negative) and yur rights befre we prcess yur persnal data fr ur legitimate interests. 2. Where yu have given us cnsent Cnsent means that yu have given us clear cnsent fr us t prcess yur data fr a specific purpse. Yu have the right t withdraw cnsent t marketing at any time by cntacting us. 3. Where we need t cmply with a legal r regulatry bligatin. Cmply with a legal r regulatry bligatin means prcessing yur persnal data where it is necessary fr cmpliance with a legal r regulatry bligatin that we are subject t. 3

4 Purpses fr which we will use yur persnal data 1. Legitimate interests We rely n the legitimate interest basis t prcess yur data in the fllwing circumstances: T administer and prtect ur business and this website (including trubleshting, data analysis, testing, system maintenance, supprt, reprting and hsting f data, management f campsite bkings) This is necessary fr running ur business, prvisin f administratin and IT services, netwrk security, t prevent fraud and in the cntext f a business rerganisatin r a restructuring exercise. T deliver relevant website cntent and advertisements t yu and measure r understand the effectiveness f the advertising we serve t yu. This is necessary t study hw individuals use ur website, t develp ur website, t grw ur business and t infrm ur strategy. T use data analytics t imprve ur website, services, marketing, users relatinships and experiences. This is necessary t define types f users fr ur services, t keep ur website updated and relevant, t develp and infrm ur strategy. T respnd t queries made thrugh the website This is necessary t be able t prvide yu with a respnse t yur query. 2. Legal r regulatry bligatin We als rely n the legal r regulatry bligatin grund t prcess yur data in sme circumstances. This means prcessing yur persnal data where it is necessary fr cmpliance with a legal r regulatry bligatin that we are subject t. yur Please cntact us if yu wuld like mre details abut the specific legal grund we are relying n t prcess persnal data. 4

5 Ckies Our website des nt use ckies. Change f purpse We will nly use yur persnal data fr the purpses fr which we cllected it, unless we reasnably cnsider that we need t use it fr anther reasn and that reasn is cmpatible with the riginal purpse. If yu wish t get an explanatin as t hw the prcessing fr the new purpse is cmpatible with the riginal purpse, please cntact us. If we need t use yur persnal data fr an unrelated purpse, we will ntify yu and we will explain the legal basis which allws us t d s. Please nte that we may prcess yur persnal data withut yur knwledge r cnsent, in cmpliance with the abve rules, where this is required r permitted by law. 5. DISCLOSURES OF YOUR PERSONAL DATA We may have t share yur persnal data with the parties set ut belw fr the purpses set ut in paragraph 4 abve. External Third Parties: Service prviders based in UK wh prvide IT, system administratin services and e-marketing n the Cherry Tree Farm Campsite's behalf. Prfessinal advisers including lawyers, bankers, auditrs and insurers based in the United Kingdm wh prvide cnsultancy, banking, legal, insurance and accunting services. HM Revenue & Custms, regulatrs and ther authrities based in the United Kingdm wh require reprting f prcessing activities in certain circumstances. Third parties t whm we may chse t sell, transfer, r merge parts f ur business r ur assets. Alternatively, we may seek t acquire ther businesses r merge with them. If a change happens t ur business, then the new wners may use yur persnal data in the same way as set ut in this privacy ntice. We require all third parties t respect the security f yur persnal data and t treat it in accrdance with the law. We d nt allw ur third-party service prviders t use yur persnal data fr their wn purpses and nly permit them t prcess yur persnal data fr specified purpses and in accrdance with ur instructins. 5

6 6. DATA SECURITY We have put in place apprpriate security measures t prevent yur persnal data frm being accidentally lst, used r accessed in an unauthrised way, altered r disclsed. In additin, we limit access t yur persnal data t thse emplyees, agents, cntractrs and ther third parties wh have a business need t knw. They will nly prcess yur persnal data n ur instructins and they are subject t a duty f cnfidentiality. We have put in place prcedures t deal with any suspected persnal data breach and will ntify yu and any applicable regulatr f a breach where we are legally required t d s. 6

7 7. DATA RETENTION Hw lng will yu use my persnal data fr? We will nly retain yur persnal data fr as lng as necessary t fulfil the purpses we cllected it fr. T determine the apprpriate retentin perid fr persnal data, we cnsider the amunt, nature, and sensitivity f the persnal data, the ptential risk f harm frm unauthrised use r disclsure f yur persnal data, the purpses fr which we prcess yur persnal data and whether we can achieve thse purpses thrugh ther means, and the applicable legal requirements. Details f retentin perids fr different aspects f yur persnal data are available in ur retentin plicy which yu can request frm us by cntacting us. 8. YOUR LEGAL RIGHTS Under certain circumstances, yu have rights under data prtectin laws in relatin t yur persnal data. i. Request access t yur persnal infrmatin (cmmnly knwn as a "data subject access request"). This enables yu t receive a cpy f the persnal infrmatin we hld abut yu and t check that we are lawfully prcessing it. ii. iii. iv. Request crrectin f the persnal infrmatin that we hld abut yu. This enables yu t have any incmplete r inaccurate infrmatin we hld abut yu crrected. Request erasure f yur persnal infrmatin. This enables yu t ask us t delete r remve persnal infrmatin where there is n gd reasn fr us cntinuing t prcess it. Yu als have the right t ask us t delete r remve yur persnal infrmatin where yu have exercised yur right t bject t prcessing (see belw), where we may have prcessed yur infrmatin unlawfully r where we are required t erase yur persnal data t cmply with lcal law. Object t prcessing f yur persnal infrmatin where we are relying n a legitimate interest (r thse f a third party) and there is smething abut yur particular situatin which makes yu want t bject t prcessing n this grund. Yu als have the right t bject where we are prcessing yur persnal infrmatin fr direct marketing purpses. v. Request the restrictin f prcessing f yur persnal infrmatin. This enables yu t ask us t suspend the prcessing f persnal infrmatin abut yu, fr example if yu want us t establish its accuracy r the reasn fr prcessing it. vi. vii. Request the transfer f yur persnal infrmatin t anther party. Withdraw cnsent at any time where we are relying n cnsent t prcess yur persnal data. Hwever, this will nt affect the lawfulness f any prcessing carried ut befre yu withdraw yur cnsent. If yu withdraw yur cnsent, we may nt be able t prvide certain prducts r services t yu. We will advise yu if this is the case at the time yu withdraw yur cnsent. If yu want t exercise any f the abve rights, please cntact Data Privacy Manager in writing. 7

8 N fee usually required Yu will nt have t pay a fee t access yur persnal data (r t exercise any f the ther rights). Hwever, we may charge a reasnable fee if yur request is clearly unfunded, repetitive r excessive. Alternatively, we may refuse t cmply with yur request in these circumstances. What we may need frm yu We may need t request specific infrmatin frm yu t help us cnfirm yur identity and ensure yur right t access yur persnal data (r t exercise any f yur ther rights). This is a security measure t ensure that persnal data is nt disclsed t any persn wh has n right t receive it. We may als cntact yu t ask yu fr further infrmatin in relatin t yur request t speed up ur respnse. Time limit t respnd We try t respnd t all legitimate requests within ne mnth. Occasinally it may take us lnger than a mnth if yur request is particularly cmplex r yu have made a number f requests. In this case, we will ntify yu and keep yu updated. 8