1. What personal data is being collected and why?
2. What is the legal basis for processing activities?
GDPR Article 6 (1) (f) ‘processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party except where such interest are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of the personal data’
PECR citation 22(3) ‘A person may send or instigate the sending of electronic mail for the purposes of direct marketing where—
(a)that person has obtained the contact details of the recipient of that electronic mail in the course of the sale or negotiations for the sale of a product or service to that recipient;
(b)the direct marketing is in respect of that person’s similar products and services only; and
(c)the recipient has been given a simple means of refusing (free of charge except for the costs of the transmission of the refusal) the use of his contact details for the purposes of such direct marketing, at the time that the details were initially collected, and, where he did not initially refuse the use of the details, at the time of each subsequent communication.
2. If you have signed up to receive emails from us then the following legal basis applies:
GDPR Article 6 (1) (a) ‘the data subject has given consent to the processing of his or her personal data for one or more specific purposes’
3. Who will the personal data be shared with?
4. How long will personal data be retained?
5. Accessing your personal data
We acknowledge your right to access your personal information. You may access, update, correct or withdraw the personal information you provide to us by emailing a request to firstname.lastname@example.org.