PRIVACY NOTICE INTRODUCTION TO OUR DATA PROTECTION & PRIVACY POLICY This is our data protection and privacy policy that explains who we are, how we process personal data and, if you are the subject of any of the personal data concerned, what rights you have and how to get in touch with us if you need to. WHO WE ARE We are Engine Partners UK LLP. Our contact and other details are set out at the end of this policy. We are the data controller in relation to the personal data processed in accordance with this policy (except where this policy explains otherwise). There are a number of agencies within our organisation and they are: Deep Focus Fuel MHP Mischief NuFu ORC International Partners Andrews Aldridge Slice Synergy Transform Trailer Park WCRS Engine Media Please note that Engine Media Privacy Notice information can be found at: https://www.enginemedia.com/privacy-policy THE PURPOSES FOR WHICH WE COLLECT PERSONAL DATA We collect and process personal data as follows: If you are a client or ours (or you work for a client of ours) We may collect your individual contact information to enable us to communicate with you in relation to the provision of services by us (for example, in relation to the management and administration of the provision of the relevant services) and other personal information relating to you to in the course of providing the services concerned (for example, bank account or other financial details, personal description and photograph and other information relating to you that is included in any communications between us and you or anyone you work with in the course of provision of the services). If you provide goods or services (or you work for, or are agent for, someone who supplies goods or services) to us or to any of our clients (for example, in relation to an advertising campaign). This may include actors, performers, designers, artists and people in other creative fields, as well as sports people and others who are involved in licensing, endorsement or promotion to or on behalf of us or our clients). We may collect your individual contact information to enable us, our clients or other suppliers of ours or our clients to communicate with you in relation to the provision of goods or services by you or the person that you work for (for example, in relation to the management and administration of the provision of the relevant goods or services) and other personal information relating to you to in the course of provision of the goods or services concerned. This may include, for example, bank account or other financial details, personal description and photograph, physical details such as body measurements where clothing or equipment is being provided, and other information relating to you that is included in any communications between us and you or anyone you work with in the course of provision of the goods or services. If we are assessing your suitability or ability to provide goods or services to us or to any of our clients We may collect relevant personal information relating to you to the extent necessary to enable that assessment to take place – for example, if we need to assess or confirm your age, your right to work in the UK, your skills and previous experience, your qualifications or whether there is anything (for example, relating to your past history, your health or your conduct or reputation) that would adversely affect your suitability or ability to provide the goods or services concerned. This will be explained to you in more detail at the time we collect the personal data and, where appropriate, will be subject to your prior consent. If you are invited to, or attend, an event organised or managed by us We may collect your individual contact and related information (as well as that of anyone who is attending the event with you) as necessary to enable you and any other relevant individuals to be invited to, and to attend, the event and to facilitate your attendance (for example, dietary or special access requirements). If we have to provide or arrange any facilities, resources, travel, accommodation or anything else necessary to enable or assist you to provide goods or services to us or our clients We may collect relevant personal information relating to you in order to enable us to do so (for example, your passport details if we have to arrange travel or accommodation for you). If we have to arrange insurance relating to you We may collect relevant personal information relating to you to the extent necessary to enable that insurance to be obtained (for example, information relating to your current state of health if that is necessary in relation to the insurance concerned). If you are a respondent to any survey, research, interview or other enquiry carried out by us We may collect personal information from you as part of surveys or other research carried out by us, although in that case we will normally provide you at the time with more detailed information about how we will process the personal information concerned (and the processing of your personal data may be subject to a more specific policy which will be provided to you at the time). If you are a public official, otherwise act in official capacity, work for a public body, are a journalist or otherwise involved in the media and we need to contact you in the course of providing public relations or related services for our clients We will collect your contact details to enable us to communicate with you on behalf of or in relation to our clients. If you browse any of our websites We may collect information on your visits to our website and how you move around different sections of our website for analytics purposes to understand how people use our website so that we can make it more intuitive. We may keep a record of the content on our website that you have clicked on and use that information to target advertising on this website to you that is relevant to your interests and which we have identified based on content you have looked at. This may involve the use of cookies, which is explained in our cookies policy. If we wish to send you advertising, marketing or promotional material We may collect your individual contact details in order to send you direct marketing material in order to advertise, market or promote our services (either to you or the person that you work for, as appropriate). We may combine this with other information we obtain about the things you are interested in and that are relevant to the services provided by us (for example, when you browse our website and view particular content) in order to help us ensure that marketing material that we send you is relevant to what you are interested in. If you apply for a position with us We may collect personal information in relation to you in connection with any application by you for a position with us. In that case, we will explain in more detail at the time how and for what purposes we intend to process the relevant personal information. If you are a customer or other contact of any of our clients If requested to do so by a client, we may collect your individual contact information or other information relevant to your dealings with, or of other relevance to, our clients (for example, goods or services that you have obtained from our client or relevant social media interaction relevant to our client) for the purpose of contacting you on our client’s behalf. In doing this, we will normally be acting as a data processor on behalf of the relevant client, and Any processing of your personal data by us will be solely in accordance with our client’s instructions and under our client’s control. WHERE WE PROCESS YOUR PERSONAL DATA We normally process personal data only in the UK or elsewhere in the EU. Where necessary in order to provide our services (for example, when providing services in relation to an international campaign) we may share relevant personal data with our associated companies outside the EU (for example, in the UK), but only to the extent necessary in order to provide the services concerned. Where personal data is transferred in relation to providing our services we will take all steps reasonably necessary to ensure that it is subject to appropriate safeguards, such as relying on a recognised legal adequacy mechanism which may include by entering into EC approved standard contractual clauses relevant to transfers of personal information – see: http://ec.europa.eu/justice/dataprotection/internationaltransfers/transfer/index_en.html and that it is treated securely and in accordance with this privacy policy. SECURITY OF YOUR PERSONAL DATA All personal data processed by us is stored securely (the level of security being appropriate to the nature of the data concerned and the other relevant circumstances). Any payment transactions administered by us will be encrypted using appropriate technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website or systems, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website and any transmission is at your own risk. Once we have received your information, we will use appropriate procedures and security features to try to prevent unauthorised access WHO WE SHARE YOUR PERSONAL DATA WITH We may where appropriate share your personal data with: Any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries. Appropriate third parties including: our business partners, customers, suppliers and sub-contractors for the performance of any contract we enter into or other dealings we have in the normal course of business with you or the person that you work for; the media, where you are participating in advertising or other marketing or promotion that is intended to be publicly disseminated; our auditors, legal advisors and other professional advisors or service providers; credit or other similar reference agencies for the purpose of assessing your suitability or ability where this is in the context of us entering (or proposing to enter) into a contract with you or the person that you work for. In relation to information obtained via our website: our advertisers and advertising networks that require the data to select and serve relevant adverts to you and others. We do not disclose information about identifiable individuals to our advertisers, but we will provide them with aggregate information about our users. We may also use such aggregate information to help advertisers reach the kind of audience they want to target. We may make use of the personal data we have collected from you to enable us to comply with our advertisers’ wishes by displaying their advertisement to that target audience and subject to the cookie section of this policy; analytics and search engine providers that assist us in the improvement and optimisation of our site and subject to the cookie section of this policy. OTHER DISCLOSURES WE MAY MAKE We may disclose your personal data to third parties: In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets subject to the terms of this privacy policy. If we or substantially all of our assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets. If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of supply terms and other agreements with you or the person that you work for; or to protect the rights, property, or safety of our business, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of child protection, fraud protection, or credit risk reduction. THE LEGAL BASIS FOR OUR PROCESSING OF PERSONAL DATA The legal basis on which we process your personal data is as follows: Where it is necessary to obtain your prior consent to the processing concerned in order for us to be allowed to do it, we will obtain and rely on your consent in relation to the processing concerned (in relation to any processing we are carrying out with your consent, see below for how to withdraw your consent). Otherwise, we will process your personal data where the processing is necessary: for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into such a contract; for compliance with a legal obligation to which we are a subject; or for the purposes of the legitimate interests pursued by us or another person, provided that this will only be in circumstances in which those legitimate interests are not overridden by your interests or fundamental rights and freedoms which require protection of personal data (most circumstances in which we process your personal data in relation to a relationship that we have with the person that you work for will fall into this category). HOW LONG WE KEEP YOUR PERSONAL DATA We process personal data only for so long as is necessary for the purpose(s) for which it was originally collected, after which it will be deleted or archived except to the extent that it is necessary for us to continue to process it for the purpose of compliance with legal obligations to which we are subject or for another legitimate and lawful purpose. YOUR RIGHTS You have the following rights in relation to personal data relating to you that we process: You may request access to the personal data concerned. You may request that incorrect personal data that we are processing be rectified. In certain circumstances (normally where it is no longer necessary for us to continue to process it), you may be entitled to request that we erase the personal data concerned. Where we are processing your personal data for marketing purposes or otherwise based on our legitimate interests, you may in certain circumstances have a right to object to that processing. Where we are processing personal data relating to you on the basis of your prior consent to that processing, you may withdraw your consent, after which we shall stop the processing concerned. To exercise any of your rights (including withdrawing relevant consents or obtaining access to your personal data), you should contact us as set out below. If you have a complaint about any processing of your personal data being conducted by us, you can contact us as set out below or lodge a formal compliant with the Information Commissioner. CONTACTING THE REGULATOR The Information Commissioner is the supervisory authority in the UK and can provide further information about your rights and our obligations in relation to your personal data, as well as deal with any complaints that you have about our processing of your personal data. CONTACTING US Our contact details are: Engine Partners UK LLP 60 Great Portland Street London W1W 7RT Contact: The Data Protection Officer Email: dpo@mhpc.com Phone: +44 (0) 203 128 8010 UPDATES TO THIS POLICY Any changes we make to our privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy policy. DATE OF THIS POLICY This policy was last updated on 14th May 2018 contactus@mhpc.com Follow us We’re part of Find out more at enginegroup.com/uk Terms of use Privacy Notice Cookies Policy