For the purpose of the Data Protection Regulations the data controller is Seven Publishing Group Ltd of 3-7 Herbal Hill, London, EC1R 5EJ.
Please contact either our vDPO, Simon Ghent or our Privacy Coordinator, Patrick Fenton at firstname.lastname@example.org with any queries or to exercise your right to disclose, erase, migrate or update your data as a data subject.
We may collect and process the following personal data about you including:
We use the data we collect in the following ways:
We process data under the lawful basis of consent, legitimate interests and our contractual obligations.
Any legitimate interests pursued by us, or third parties we use, are as follows:
We may need to disclose your personal information to third parties in order to provide a service to you or fulfil an obligation. You will be specifically warned of this beforehand usually next to the form obtaining you data.
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.
Your data will only be stored as long as it is necessary to carry out the task for which it was gathered or as long as our legal and legitimate interests require. It will then be securely deleted. Our standard retention period is 3 months.
We currently do not process any personal data in countries outside of the EAA and we would only do so in the future if they are on the EU Commission’s list of countries or territories providing adequate protection for the rights and freedoms of data subjects in connection with the processing of their personal data or the 3rd party company has proven their compliance with GDPR. This notice will be updated to reflect any changes.
Under the GDPR you have the following rights:
If you wish to exercise any of these rights, please contact us. You will not be required to pay a fee to access your personal data, or to exercise any of the other rights.
However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We are required to respond to all requests within one month. Occasionally it may take us longer than a month to respond if your request is particularly complex or you have made repeated requests. In this case, we will notify you that we have received your request and keep you updated.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the opportunity to deal with your concerns before you approach the ICO, so please contact us in the first instance.