For the purpose of the Data Protection Act 1998 (the Act), and the General Data Protection Regulations (GDPR), from 25 May 2018, the data controller is Janine Williams, firstname.lastname@example.org.
1. Information we may collect from you
1.1 We may collect and process the following data about you:
a. Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use the Website, subscribing to our service and any additional, posting material, contributions or requesting further services. We may also ask you for information when you enter a competition or promotion sponsored by us and when you report a problem with our Website.
b. If you contact us, we may keep a record of that correspondence.
c. We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
d. Details of transactions you carry out through our Website.
e. Details of your visits to the Website including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.
2. IP addresses and cookies
2.1 We may collect information about your device, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.
2.2 For the same reason, we may obtain information about your usage of our Website by using a cookie which is stored on the hard drive of your device.
Cookies are used to make our Website work and to deliver a better and more personalised service. They enable us:
a. To estimate our audience size and usage pattern.
b. To store information about your preferences, and so allow us to customise our Website according to your individual interests.
c. To speed up your searches.
d. To recognise you when you return to our Website.
The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.
4. Where we store your personal data
4.1 As our servers are located in the United Kingdom, the data that we collect from you is obtained, processed, stored and transmitted in compliance with data protection legislation. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely
5 Marketing/eNewsletters – Consent.
5.1 Our retention periods for your personal data:
a. Operational Database records will be deleted after 18 months of last use, e.g. checking out of accommodation.
b. eMarketing Database records will be deleted after 24 months of last use, e.g. an email being sent.
5.2 Business records storage and publishing:
a. For storing and publishing business records on this website, our lawful basis for processing this data is “Legitimate interests”. The ICO website states the following, "It is likely to be most appropriate where you use people’s data in ways they would reasonably expect and which have a minimal privacy impact."
b. We store accommodation, venue and other business details (Trade Data) in our database to facilitate publishing them on this website. Our legal basis for this processing is that it is necessary for the purpose of the legitimate interests pursued by the controller. Business details are, by their nature, already in the public domain and we are using them in a way the businesses would reasonably expect and could benefit from.