- Purpose and lawful basis for processing
- What we need
- Why we need it
- What we do with it
- How long we keep it
- What are your rights?
- Do we use any data processors?
Our purpose for collecting this information is so we can respond to you and give you information about the legislation we oversee in order for you to publish.
The lawful basis we rely on for processing your personal data is public task, under article 6(1)(e) of the GDPR.
We need enough information from you so we can respond to you. We’ll take your name and number/contact email address and, where relevant, the name of the organisation you represent.
We need to keep a record of who we have spoken with and what has been asked for/provided. If we can’t answer your query/request over the phone, we’ll need your contact information for our response.
We’ll only use your personal information to respond to you and will make a record of our communications with you, both verbal and written.
We’ll also use your contact information to send you our press releases.
For information about how long we hold personal data, see our retention schedule.
We are acting in our official capacity as a regulator in providing you with press releases and responding to media enquiries. This means you have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.
You can however, ask us to stop sending you press releases at any time and we’ll update our records immediately to reflect your wishes.
For more information on your rights, please see ‘Your rights as an individual’.
Yes – We use PRgloo and Kantar, who are in partnership with Agility, to store communications and distribute our press releases.