Source: http://clydecoasttourism.co.uk/about-clyde-coast-tourism/ct-menu-item-7.html
Timestamp: 2019-04-18 15:25:41+00:00

Document:
The legitimacy of our data processing is based on Art. 6(1) sentence 1(f) GDPR. Our legitimate interest derives from the aforementioned data recording purposes. We do not use data to draw conclusions about you as an individual.
permissible by law and necessary for the performance of contracts with you pursuant to Art. 6(1) sentence 1(b) GDPR.
Where we process data in a third country (i.e. outside the European Union (EU) or European Economic Area (EEA)), where this is done whilst using third-party services or when disclosing or transmitting data to third parties this will only be done so as to fulfil our (pre)contractual duties, with your consent, where required by law to do so, or where we have a legitimate interest in so doing. Unless there should be a statutory exemption we will only process data in a third country if the special statutory conditions under Art. 44 et seq. GDPR are fulfilled.
under Art. 77 GDPR to lodge a complaint with a supervisory authority. You may generally address this to the supervisory authority at your habitual place of residence, your place of work or our place of business.
Where your personal data is processed for the purpose of legitimate interests under Art. 6(1) sentence 1(f) GDPR you have the right under Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation or where the objection is levelled at direct marketing. In the latter case you have a general right to object which will be implemented by us without a particular situation having to be specified.
Data processed using cookies is required for the said purposes in order to safeguard our legitimate interests and those of third parties pursuant to Art. 6(1) sentence 1(f) GDPR.
The tracking measures stated below and applied by us are based on Art. 6(1) sentence 1(f) GDPR. The use of tracking measures is intended to ensure demand-oriented design and ongoing optimisation of our website. We also use tracking measures to ascertain our website usage for statistical purposes and evaluate it so as to optimise our services for you. These constitute legitimate interests within the meaning of Art. 6(1) sentence 1(f) GDPR.
We use social plug-ins for social media on our website based on Art. 6(1) sentence 1(f) GDPR. The underlying promotional aim is deemed a legitimate interest within the meaning of the GDPR. Responsibility for compliance with data protection rules lies with the particular provider concerned.
2.1 of this Privacy Statement is also transmitted. In the case of Facebook and Xing the IP address recorded is anonymised immediately as stated by the respective provider in Germany. By activating the plug-in, therefore, personal data is sent by you to the plug-in provider concerned and stored there (for USA providers in the USA). As the plug-in provider gathers data using cookies in particular we recommend that you delete all cookies via your browser security settings before clicking on the greyed-out field.
The plug-in provider stores the data collected about you as usage profiles and uses it for the purposes of advertising, market research and/or demand-oriented design of its website. This kind of evaluation is especially undertaken (even for users not logged on) to present demand-oriented advertising and to inform other users of the social network of your activity on our website. You have the right to object to the creation of such user profiles although in order to exercise that right you have to turn to the respective plug-in provider. With plug-ins we give you an opportunity to interact with social media and other users so that we can improve our services and make things more interesting for you, the user. The legitimacy of our use of plug-ins is based on Art. 6(1) sentence 1(f) GDPR.
Slainte Scotland (Clyde Coast Tourism Ltd) use a 3rd party to process payments - Fareharbor, Paypal and Trekksoft. We (Slainte Scotland and Clyde Coast Tourism) do not store any of your personal information directly and ask that you do not send any highly confidential information such as card details over email. If this does happen, it will immediately be deleted.

References: Art. 6
 Art. 6
 Art. 44
 Art. 77
 Art. 6
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6