At FOOTPRINT+ we take your privacy seriously and this privacy statement explains what personal data or information we collect from you, and from people who visit our website, and how we use it. We would encourage you to read the information below.
Who are we?
Footprint Brighton Limited is a company registered in England Company number 12569368 our registered address is 4th Floor, Fitzrovia House, 153-157 Cleveland Street, London, United Kingdom, W1T 6QW. Footprint Brighton ltd is the UK Property Event for a Zero Carbon Future. A centre of excellence exploring state of the art techniques on carbon reduction.
We may collect the following personal data about you:
· Personal details you provide (such as name, address, e-mail address, business address, phone number) when completing a form on this Site.
· Payment details that we require for processing any payments for services or events provided by Footprint Brighton Ltd on your instruction.
· Personal details you choose to give when corresponding with us by phone, email, or that you provide to us when you visit Footprint Brighton Ltd. This includes, without limitation, information provided at the time of registering to the Site, posting material to us and if you report a problem with the Site.
· Any other personal or private information about you that you choose to submit to this Site or any other websites we operate.
· Information about your preferences (e.g. cookie data, clickstream data, browsing history, responses to direct marketing, and opt-outs from direct marketing) and any information provided to us by third parties.
How do we collect data or information from you?
We collect personal information about you when you:
- Sign up to our newsletter
- Make an enquiry via the forms on our website or via the telephone
- Use our website
- Enquire about participating in Footprint
- Enquire about sponsoring Footprint
- Exchange business cards or contact details with an employee or partner of Footprint
- Attend one of our events
- Process payment for attendance, sponsorship, hospitality
How is your information used?
We may use your personal data in the following ways:
· To operate our business and provide you with services you have requested;
· To display the content of this Site, and any customisations you may select;
· To verify your identity;
· To acknowledge, confirm and deal with your enquiry, brief or order;
· Where we are asked to deal with any other enquiries or complaints you may make;
· To notify you about any changes to this Site, or services provided through this Site;
· To provide you with information about our services. We may contact you by email, post, text or phone on the basis of legitimate interests. Any marketing that you receive from us will allow you to unsubscribe from further marketing communications;
· To contact you in connection with user/customer/member surveys and use any information you choose to submit in response;
· To administer our Site and ensure that our Site is presented in the most effective manner for your and your computer/device;
· For internal business/technical operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes and as part of our efforts to keep our Site secure;
· On an aggregate basis, to understand how individuals collectively use the features of our Site;
· To see if an email we have sent to you: (a) has been read by you, (b) when it was read, (c) how many times it has been read (or at least opened), (d) if it has been transferred to others, and (e) to which email server, including its location.
· To establish or exercise any legal rights or claims;
· As per terms and conditions of ticket purchasing we may use your data to present attendee lists – this would be name, job title and company name only – in addition to creating a profile on the delegate directory
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Processing Personal Data for Legitimate Business Purposes
We may also process personal information for certain legitimate business purposes, which include some or all of the following:
· Where processing enables us to determine the effectiveness of marketing campaigns;
· To provide communications which we think will be of interest to you by mail;
· To process your data on our systems to ensure relevant communications;
· To better understand how people interact with our websites;
· To identify and prevent fraud;
· To enhance the security of our network and information systems; and/or
· To administer the Site and carry out data analysis, troubleshooting and testing.
Whenever we process data for these purposes we will ensure that we always keep your personal data rights in high regard and take account of these rights. You have the right to object to this processing if you wish, and if you wish to do so, please email email@example.com Please bear in mind that if you object this may affect our ability to carry out tasks above for your benefit.
If we are unable to rely on legitimate interest or any other ground set out in the GDPR to process your personal data, we will obtain consent from you to the processing.
If we obtain consent from you to do so, we may provide your personal details to third parties so that they can contact you directly in respect of services and/or products in which you may be interested.
We may, when contacting you via email, monitor your behaviour of that email through the use of embedded tracking pixels. We will always obtain your express consent before making use of these pixels.
Disclosure of your personal data
We may share your personal data with third parties in the following situations:
We may disclose your personal data to our employees and agents to the extent necessary to provide you with the services you have requested.
· We may make your personal data available to selected third parties who act on our behalf to support our operations (for example card processing or payment services (see the section below headed ‘Payment Information’) and credit reference agencies to protect against possible fraud, subject to appropriate contractual protections in accordance with applicable law.
· Our IT suppliers and contractors (e.g. data hosting providers or delivery partners) who may need to have access to your personal data to provide IT support and enable us to provide products and services, subject to appropriate contractual protections in accordance with applicable law.
· If we sell or transfer all, or any portion, of our business or our company assets to any third party, personal data held by us from you may be one of the transferred assets.
· To protect us or contractors against loss or damage (including without limitation, exchanging information with the police, courts or law enforcement organisations).
· To the extent necessary to establish, exercise or defend legal rights or claims, or for the purposes of investigating actual or suspected unlawful activity.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We do not transfer your personal data outside the UK.
We take the security of our clients’ data very seriously and we use appropriate measures to protect all personal information collected in a secure, controlled environment consistent with GDPR legislation. The personal data that we collect from you is stored on UK based servers. Unfortunately, the transmission of information over the internet or public communications networks can never be completely secure. When you submit your personal information through our websites this is at your own risk.
Viper IT provide us with IT support services. They do not routinely access the data on our systems, but may have to provide maintenance and upgrade services which gives them access to the data.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
By law we have to keep basic information about our customers for six years after they cease being customers for tax purposes.
In some circumstances you can ask us to delete your data: please see “Your Data Protection Rights” section below for further information.
In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
Your Data Protection Rights
Subject to applicable law, you may have the following rights in relation to your personal data:
· The right to request access to, or copies of, your personal data that we process (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
· The right to request correction of any inaccuracies in your personal data. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
· The right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as your feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
· The right to lodge a complaint with a supervisory authority (the Information Commissioner’s Office (ICO)), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance by emailing firstname.lastname@example.org
· The right to request that your personal data is deleted. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see above), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Please note we may need to ask you for further information to verify your identity before we can respond to any request. We may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
· The right to request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
If you want us to establish the data’s accuracy.
Where our use of the data is unlawful but you do not want us to erase it.
Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims or
Where you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
· The right to request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
· The right to withdraw consent at any time where we are relying on consent to process your personal data. If you would like to withdraw your consent, or you would not like us to collect or use your personal data for certain purposes, please contact us using the contact details below. This will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We will try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
If you wish to exercise any of the rights set out above, please contact us.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.