PRIVACY STATEMENT
We are a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you. This privacy policy explains the purposes for which we collect your data, what data we collect, how we store it and for how long. If you are applying for work with us (whether as an employee, worker or contractor) then please refer to our Candidate Privacy Policy which sets out specifically how we work with our candidates. It provides you with certain information that must be provided under the General Data Protection Regulation ((EU) 2016/679) (GDPR).
This Privacy Policy applies to the personal data of our Web Site users and Registered Web Site Users.
Please note that we may amend this Privacy Policy from time to time so please check our website to stay up to date.
Data protection principles
Used lawfully, fairly and in a transparent way.
Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
Relevant to the purposes we have told you about and limited only to those purposes.
Accurate and kept up to date.
Kept only if necessary for the purposes we have told you about.
Kept securely.
What kind of personal information do we collect?
All Web Site Users:
When you visit our Web Site, there is certain information that we may automatically collect, whether or not you decide to use our services. This includes your IP address, the date and the times and frequency with which you access the Web Site and the way you browse its content.
We collect your data automatically via cookies, in line with cookie settings in your browser. Any such automatically collected data will be used solely for the purpose of tracking usage and usage patterns of the Web Site.
Registered Web Site Users:
How do we collect your personal data?
All Web Site Users:
Registered Web Site Users:
How do we use your personal data?
For Registered Web Site Users, we will use your data in the following ways:
To restrict and manage access to the members’ only area of the Web Site;
To provide you with occasional information relevant to the book series;
To send occasional emails to you concerning our current and upcoming books.
If you are unhappy at any time with the way we use your data, then you have the right to withdraw your consent at any time. Please contact us at compliance@thecorshamfiles.com.
How long do we keep your personal data for?
How can your access, amend or restrict the processing of any personal data we hold?
In addition, you have the following rights:
Right to object: this right enables you to object to us processing your personal data where we do so for one of the following four reasons: (i) our legitimate interests; (ii) to enable us to perform a task in the public interest or exercise official authority; (iii) to send you direct marketing materials; and (iv) for scientific, historical, research, or statistical purposes. If your objection relates to us processing your personal data because we deem it necessary for your legitimate interests, we must act on your objection by ceasing the activity in question unless we can show that we have compelling legitimate grounds for processing which overrides your interests; or we are processing your data for the establishment, exercise or defence of a legal claim. Similarly, if your objection relates to direct marketing, we must act on your objection by ceasing this activity.
Right to withdraw consent: Where we have obtained your consent to process your personal data for certain activities (for example, for our marketing arrangements), you may withdraw this consent at any time and we will cease to carry out the particular activity that you previously consented to unless we consider that there is an alternative reason to justify our continued processing of your data for this purpose in which case we will inform you of this condition.
Right to erasure: You have the right to request that we erase your personal data
Right to restrict processing: You have the right to request that we restrict our processing of your personal data. If you choose to do so, we will remove your registration from our systems.
Right to rectification: You also have the right to request that we rectify any inaccurate or incomplete personal data that we hold about you. If we have shared this personal data with third parties, we will notify them about the rectification unless this is impossible or involves disproportionate effort. Where appropriate, we will also tell you which third parties we have disclosed the inaccurate or incomplete personal data to. Where we think that it is reasonable for us not to comply with your request, we will explain our reasons for this decision.
Right of data portability: If you wish, you have the right to transfer your personal data between data controllers. This right of data portability applies to: (i) personal data that we process automatically (i.e. without any human intervention); (ii) personal data provided by you; and (iii) personal data that we process based on your consent or to fulfil a contract.
Right to lodge a complaint with a supervisory authority: You also have the right to lodge a complaint with your local supervisory authority, which in the UK is The Information Commissioner’s Office.
If you would like to exercise any of these rights, or withdraw your consent to the processing of your personal data (where consent is our legal basis for processing your personal data), you can contact us directly at compliance@thecorshamfiles.com