Source: http://campervanbrewery.com/privacy
Timestamp: 2020-02-20 23:48:31
Document Index: 529968496

Matched Legal Cases: ['Art 6', 'Art 6', 'Art 9', 'Art 6', 'Art 9', 'Art 6', 'Art 6', 'Art 6', 'Art 6', 'Art 9', 'Art 6', 'Art 6', 'Art 6', 'Art 9']

Data Protection Privacy Notice | Campervan Brewery
Campervan Brewery Data Protection Privacy Notice
This is the Privacy Notice for Campervan Brewery.
This privacy notice explains how we collect and use personal information about individuals.
Address: Campervan Brewery, Bonnington Business Centre, 112 Jane Street, Edinburgh, EH6 5HG
Email: paul@campervanbrewery.com
Phone: 07786566000
We are registered as a data controller with the UK Information Commissioner and the reference number is: ZA472216
We process any personal data under the requirements of the General Data Protection Regulation (EU) 2016/679 (the GDPR) and the Data Protection Act 2018 (the DPA).
We will hold all personal data securely, we will only use it for the purposes it was collected or acquired for and we will only pass it on to third parties with your consent or according to a legal obligation.
Further information about data protection legislation and your rights is available here:
We collect and use personal data to fulfil the following functions and associated activities:
to carry out marketing and fundraising campaigns;
to respond to complaints or issues raised by individuals
to manage and support my staff and to maintain supplier relationships;
to process contracts, accounts and associated records;
to take, store and use photos and videos
If you contact us with an inquiry or a complaint, we will normally need to store your contact details to deal with your inquiry or complaint. This is considered to be “normal category data” under the GDPR.
If you are a supplier, we will normally need to store your name, contact and payment details for the purposes of the contract between us.
Data protection law states that we must have a legal basis for handling your personal data. The permitted legal bases can be found in the GDPR and the DPA.
For activities and functions which involve the processing of personal data, the legal basis for processing may, depending on the circumstances, be:
• Processing necessary for the pursuit of legitimate interests
• Consent of the data subject (the person who the personal data relates to.)
• Processing necessary to comply with legal obligations
• Processing necessary for the performance of a contract
Marketing The data subject has given consent to the processing of his or her personal data for one or more specific purposes (Art 6(1)(a) GDPR). For the period that is necessary to carry out the task for which data has been collected. By letter, email or in person with organisations including but not limited to IT service providers and law enforcement agencies.
Fundraising The data subject has given consent to the processing of his or her personal data for one or more specific purposes (Art 6(1)(a) GDPR). Or, for special category data:
(Art 9 (2)(a)
For the period that is necessary to carry out the task for which data has been collected. By letter, email or in person with organisations including but not limited to IT service providers and investigating bodies.
Receiving and storing data in relation to a complaint or problem raised by an individual The processing is necessary for the performance of a task carried out in for the purpose of a legitimate interest (Art 6(1)(f) GDPR).
Or, for special category data:
processing is necessary for reasons of public interest in the area of public health (Art 9(2)(i) GDPR and DPA Sch 1, para 3. For the period that is necessary to carry out the task for which data has been collected. By letter, email or in person with organisations including but not limited to IT service providers, investigative bodies and law enforcement agencies.
Take, store and use photos and videos. Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art 6(1)(f) GDPR). For the period that is necessary to carry out the task for which data has been collected. By letter, email or in person with organisations including but not limited to IT and printing service providers and postal service providers.
To process expenses, accounts and associated records Processing is necessary for the performance of a contract to which the data subject is party (Art 6(1)(b) GDPR). For the period that is necessary to carry out the task for which data has been collected. By letter, email or in person with organisations including but not limited to IT and printing service providers and postal service providers.
Receiving, storing and responding to enquiries in relation to human resources (HR) matters by letter, email or in person The processing is carried out with the consent of the data subject (Art 6(1)(a) GDPR) OR
Processing is necessary for compliance with a legal obligation to which the controller is subject; (Art 6(1)(c) GDPR).
processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law (Art 9(2)(b) GDPR and DPA Sch 1, para 1). For the period that is necessary to carry out the task for which data has been collected. By letter, email or in person with organisations including but not limited to IT service providers, statutory law enforcement agencies and investigative bodies.
We sometimes may be required to share the personal information we hold with other individuals or organisations including for example:
The legal basis for sharing data with these organisations may be:
that the sharing is necessary for complying with a legal obligation to which we am subject (Art 6(1)(c) GDPR;
the sharing is necessary in order to protect the vital interests of the data subject or of another person (Art 6(1)(d); or
the sharing is necessary for the performance of a task carried out in the public interest or substantial public interest (Art 6(1)(e) or Art 9(2)(g) GDPR.
We may seek your prior express consent to share your personal data with any of the following:
The consequences of our not processing personal data are:
We do not use automated processing techniques to process your data.
We do not intend to share or process personal data in locations outside the EEA.
We intend to retain personal data for the period that is necessary to carry out the task for which data has been collected. This time period may depend on factors including but not limited to the nature of the task, whether the task in intended to be repeated in future or is ongoing or requiring future reference.
Our website uses cookies to gather information about how visitors use my website to help me improve its performance, and secondly, to improve the visitor experience when using the website by delivering pages more quickly or remembering user settings.
Additionally, videos on the website may use cookies created by third-party providers such as Flash or YouTube. The information I collect is anonymous – it cannot be used to identify you personally.
• We am using that information with your consent and you have withdrawn your consent.
• You have validly objected to our use of your personal information and our use of your personal information is contrary to law or our other legal obligations.
Objecting to how we may use your information – You have the right at any time to require us to stop using your personal information for direct marketing purposes.
Restricting how I may use your information – in some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we am checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to our use of your information. The right might also apply where this is no longer a basis for using your personal information but you don’t want us to delete the data. Where this right is validly exercised, we may only use the relevant personal information with your consent, for legal claims or where there are legitimate interest grounds to do so.
We keep this privacy statement under regular review and will place any updates on this website. Paper copies of the privacy statement may also be obtained using the contact information above.
This privacy statement was last updated on 9th November 2018.
The contact details for the data controller’s Data Protection Officer (DPO) are:
Campervan Brewery, Bonnington Business Centre, 112 Jane Street, Edinburgh, EH6 5HG
paul@campervanbrewery.com
07786566000
RT @vinowineshops: Loving @campervanbrew on deal this whole month also beernewyear https://t.co/MF5XwwVHjV
@campervanbrew
RT @BrewGoodr: X marks the spot. Or 250+ spots across the world! Check out the amazing breweries from 173 cities in 24 countries, who have…
RT @Seaandnever: ISO: Looking for your experiences with talks/panels/workshops at festivals. Any kind of festival, why did you go/participa…
The Campervan Brewery
112 Jane Street
Copyright Campervan Brewery 2015. All Rights Reserved.