Data Protection Legislation means:
(i) General Data Protection Regulation (“GDPR”), the Law Enforcement Directive (“LED”) and any applicable national implementing Laws as amended from time to time
(ii) the DPA 2018 to the extent that it relates to processing of personal data and privacy;
(iii) all applicable Law about the processing of personal data and privacy;
Controller, Processor, Data Subject, Personal Data, Data Protection Officer take the meaning given in the GDPR.
The policy describes how Infographics collects and processes information that we collect from you, or that you provide to us. It covers information that could identify you (“personal information”) and information that could not. In the context of the law and this notice, “process” means collect, store, transfer, use or otherwise act on information. It tells you about your privacy rights and how the law protects you.
We are committed to protecting your privacy and the confidentiality of your personal information. Our policy is not just an exercise in complying with the law, but a continuation of our respect for you and your personal information.
We undertake to preserve the confidentiality of all information you provide to us and hope that you reciprocate.
Our policy complies with the Data Protection Act 2018 (Act) to the extent that it relates to processing of personal data and privacy and all applicable Data Protection Legislation about the processing of personal data and privacy.
The law requires us to tell you about your rights and our obligations to you in regard to the processing and control of your personal data. We do this now, by requesting that you read the information provided at http://www.knowyourprivacyrights.org
Except as set out below, we do not share, or sell, or disclose to a third party, any information collected through our website or application software.
We have appointed a data protection officer (DPO) who is responsible for ensuring that our policy is followed.
We may collect, use, store and transfer different kinds of personal data about you. We have collated these into groups as follows:
Special personal information is data about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. It also includes information about criminal convictions and offences. We do not collect any special personal information about you.
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform that contract. In that case, we may have to stop providing a service to you. If so, we will notify you of this at the time.
The law requires us to determine under which of six defined bases we process different categories of your personal information, and to notify you of the basis for each category. If a basis on which we process your personal information is no longer relevant then we shall immediately stop processing your data. If the basis changes then if required by law we shall notify you of the change and of any new basis under which we have determined that we can continue to process your information. Infographics may hold your personal information for the permitted purposes stated and for as long as is necessary for these purposes. Infographics uses industry procedures to keep personal data as safe and secure as possible and to protect against loss, unauthorised disclosure, or access.
When an individual creates an account on our website, buys a product or service from us, or otherwise agrees to our terms and conditions, a contract is formed between you and us. To carry out our obligations under that contract we must process the information you give us. Some of this information may be personal information.
We may use it to:
We process this information on the basis there is a contract between us, or that you have requested we use the information before we enter a legal contract. We shall continue to process this information until the contract between us ends or is terminated by either party under the terms of the contract.
When an organisation purchases a licence to use Infographics’ business software, Infographics may periodically gain access to Personal Data and operational data controlled by that organisation (the “Licensee”) during its use of the licenced business software. Data Subjects who could be identified during Infographics access to a Licensee’s Data may include the organisation’s staff (including volunteers, agents, and temporary workers), suppliers, members of the public and any other named individual who may interact with the organisation during its operational activities.
Infographics’ periodic access to and use of a Licensee’s operational Data is regulated using formal data processor agreements (“DPAs”) between the Licensee (the Controller) and Infographics (the Processor) and by applicable Data Protection Legislation. The purpose of formal DPAs is to enable the Licensee (acting as Controller) to legally disclose their Data and to Infographics (acting as Processor). This enables Infographics to deliver the support services required to maintain and improve the reliable operation the Licensee’s software.
We continue to process your information on this basis until you withdraw your consent, or it can be reasonably assumed that your consent no longer exists. You may withdraw your consent at any time by instructing us firstname.lastname@example.org. However, if you do so, you may not be able to use our website or our services further.
We may process information on the basis there is a legitimate interest, either to you or to us, of doing so. Where we process your information on this basis, we do so after having considered:
For example, we may process your data on this basis for the purposes of:
Sometimes, we must process your information to comply with a statutory obligation. For example, we may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order. This may include your personal information.
Our website and social media accounts allow you to post information with a view to that information being read, copied, downloaded, or used by other people.
In posting personal information, it is up to you to satisfy yourself about the privacy level of every person who might use it.
We do not specifically use this information except to allow it to be displayed or shared. We do store it, and we reserve a right to use it in the future in any way we decide. Once your information enters the public domain, we have no control over what any individual third party may do with it. We accept no responsibility for their actions at any time.
Provided your request is reasonable and there is no legal basis for us to retain it, then at our discretion we may agree to your request to delete personal information that you have posted. You can make a request by contacting us at email@example.com
Cookies are small text files placed on your computer’s hard drive by your web browser when you visit any website. They allow information gathered on one web page to be stored until it is needed for use on another, allowing a website to provide you with a personalised experience and the website owner with statistics about how you use the website so that it can be improved.
Some cookies may last for a defined period, such as one day or until you close your browser. Others last indefinitely. Your web browser should allow you to delete any you choose. It also should allow you to prevent or limit their use.
Requests by your web browser to our servers for web pages and other content on our website are recorded. We record information such as your geographical location, your Internet service provider and your IP address. We also record information about the software you are using to browse our website, such as the type of computer or device and the screen resolution.
We use this information in aggregate to assess the popularity of the webpages on our website and how we perform in providing content to you. If combined with other information we know about you from previous visits, the data possibly could be used to identify you personally, even if you are not signed into our website.
|_utma||Google Analytics||2 yrs|
|_utmb||Collects information on Website Usage||30 minutes|
|_utmc||Collects information on Website Usage||when you quit your browser|
|_utmz||Collects information on Website Usage||6 months|
Most Internet browsers allow users to control the acceptance of cookies via the browser’s settings. Visit https://www.allaboutcookies.org/ to find out how to configure these settings on several major browsers. You can opt out of being tracked by Google Analytics across all websites by installing Google’s opt-out browser add-on available at https://tools.google.com/dlpage/gaoptout
If you send us information in connection with a job application, we may keep it for up to three years in case we decide to contact you later. If we employ you, we collect information about you and your work from time to time throughout the period of your employment. This information will be used only for purposes directly relevant to your employment. After your employment has ended, we will keep your file for six years before destroying or deleting it.
You can request a copy of the details that we hold about you by emailing us at firstname.lastname@example.org (FAO: The Data Processor, with subject line ‘Personal Data Request under GDPR’).
Our websites and social media accounts are publishing media. Anyone may register and then publish information about himself, herself or some other person. We attempt to moderate user generated content, but we are not always able to do so as soon as that content is published.
If you complain about any of the content on our websites or social communication sites, we shall investigate your complaint. If we feel it is justified or if we believe the law requires us to do so, we shall remove the content while we investigate. If we think your complaint is vexatious or without any basis, we shall not correspond with you about it.
If you are not satisfied with the way we gather and manage your personal information, you have the right to complain to the national data protection authority, which in the UK is the Information Commissioner’s Office (ICO).