For the purpose of the Data Protection Regulations the data controller is Seven Publishing Group Ltd of 3-7 Herbal Hill, London, EC1R 5EJ.
What we collect
We may collect and process the following personal data about you including:
- name and job title
- contact information including email address
- demographic information such as your role
What we do with the information we gather
We use the data we collect in the following ways:
- To answer any enquiries you send our editors.
- To fulfil our legitimate interests as a business.
- To provide a service requested by you.
- To fulfil a contractual obligation.
We process data under the lawful basis of consent, legitimate interests and our contractual obligations. Any legitimate interests pursued by us, or third parties we use, are as follows:
· It is necessary for us to process the data to fulfil a request by yourself even if made to a third party.
· You would reasonably expect such processing to take place.
· We feel it would be beneficial to you and that you would expect to hear about certain services we offer.
Disclosure of your information
We may need to disclose your personal information to third parties in order to provide a service to you or fulfil an obligation. You will be specifically warned of this beforehand usually next to the form obtaining you data.
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.
Your data will only be stored as long as it is necessary to carry out the task for which it was gathered [to service your request from our ‘contact us’ form] or as long as our legal and legitimate interests require. It will then be securely deleted. Our standard retention period is 3 months.
Transfers to Third Countries
We currently do not process any personal data in countries outside of the EAA and we would only do so in the future if they are on the EU Commission’s list of countries or territories providing adequate protection for the rights and freedoms of data subjects in connection with the processing of their personal data or the 3rd party company has proven their compliance with GDPR. This notice will be updated to reflect any changes.
Your rights as a Data Subject
Under the GDPR you have the following rights:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to withdraw consent
- The right to object
If you wish to exercise any of these rights, please contact us. You will not be required to pay a fee to access your personal data, or to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We are required to respond to all requests within one month. Occasionally it may take us longer than a month to respond if your request is particularly complex or you have made repeated requests. In this case, we will notify you that we have received your request and keep you updated.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the opportunity to deal with your concerns before you approach the ICO, so please contact us in the first instance.