Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Marketing
In addition to the above uses we may use your information (and, where you have consented, permit selected third parties to use your information), to notify you about Events or services which may be of interest to you. Where we do this, we will contact you by electronic means (e-mail or SMS) only if you have consented to such communication. If you do not want us to use your personal information in this way please either (i) tick the relevant box situated on the form on which we collect your personal information (for example, the registration form); (ii) unsubscribe from our electronic communications using the method indicated in the relevant communication; or (iii) inform us at any time by contacting us at the contact details set out below.
SHARING YOUR INFORMATION
We may share your personal information with our Founder Members and other associated organisations for the purposes of completing tasks related to the operation of FIUCS, facilitating Events and providing other services to you on your behalf.
We may disclose your personal information to any member of our corporate group or a Founding Member, which means our subsidiaries, our ultimate holding company and its subsidiaries or within group businesses, as defined in section 1159 of the UK Companies Act 2006 (where applicable).
We may also disclose your personal data to third parties:
- in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets; or
- if we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets; or
- if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms of Sale and Website Terms and Conditions; or
- to protect our rights, property, or safety or that of our affiliated entities and our users and any third party we interact with the to provide the Website;
- in relation to selected third parties only, only to the extent that you have consented to such selected third parties notifying you about certain services, which may be if interest to you;
- our auditors or external financial or legal advisers;
- regulatory authorities, government authorities and/ or law enforcement officials, if mandated by law or if needed for the protection of our legitimate interest in compliance with applicable laws; and
- our suppliers, business partners, sub-contractors or business support service providers (including IT service providers, cloud platform service providers, reception staff and carters at venues used to host Events).
Other than as set out above, and save insofar as is necessary in order for us to carry out our obligations arising from any contracts entered into between you and us, we will not share your data with third parties unless we have procured your express consent to do so.
The data that we collect from you when you register to attend an Event or for any other services may be shared with others where required and transferred to, and stored at, a destination outside the United Kingdom and/or the European Economic Area (“EEA”). This may be where we share data with the Founding Members and others within the network, as required. Data may also be processed by staff or third party suppliers..
In the event your data is transferred to a country without an adequacy decision from the United Kingdom, any such transfer will be subject to standard contractual clauses approved by the United Kingdom’s Information Commissioner’s Office and any other appropriate safeguards which may be applicable to such transfers.
How long we keep your personal data
We will keep your personal information for no longer than is necessary for the purposes for which we process it. We determine appropriate retention periods for your personal information by considering the amount, nature and sensitivity of the information and the purposes for which we process your personal information and whether we can achieve those purposes through other means. We may also be required to retain your personal information by law or to comply with our regulatory obligations.
We may retain personal information for a short time beyond the specified retention period, to allow for information to be reviewed and any disposal to take place. Alternatively, if you are on a marketing list, we may retain your basic personal information within a suppression list should you choose to terminate your FIUCS membership.
If you would like further information, please contact us (see ‘Contact’ below).
YOUR RIGHTS
You have a number of important rights in relation to your personal information. In summary, those include rights to:
- access to your personal data in certain situations and to certain other supplementary information that this Notice is already designed to address;
- require us to correct any mistakes in your information which we hold;
- require the erasure of personal data concerning you in certain situations;
- receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations;
- object at any time to processing of personal data concerning you for direct marketing;
- object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you;
- object in certain other situations to our continued processing of your personal data;
- otherwise restrict our processing of your personal data in certain circumstances; and
- ask us to stop marketing to you – you can exercise this right by ticking the relevant boxes on the forms we use or messages we send you where there will be an unsubscribe or opt out box to tick.
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.
If you would like to exercise any of those rights, please:
- email using the details provided below;
- let us have enough information to identify you (e.g. name, registration details); and
- let us know the information to which your request relates.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
CONTACT
All questions, comments and requests regarding this Notice or how we handle your personal information should be addressed to
[email protected] or FIUCS, RPC, Tower Bridge House, St Katharine’s Way, E1W 1AA. If you are not happy with our response, you can contact the ICO at www.ico.org.uk.
