- Purpose and lawful basis for processing
- What we need
- Why we need it
- What we do with it
- How long we keep it
- What are your rights?
- Do we use any data processors?
Purpose and lawful basis for processing
Our purpose for collecting this information is so we can respond to you and give you information about the legislation we oversee in order for you to publish.
The lawful basis we rely on for processing your personal data is public task, under article 6(1)(e) of the UK GDPR.
What we need
We need enough information from you so we can respond to you. We’ll take your name and number/contact email address and, where relevant, the name of the organisation you represent.
Why we need it
We need to keep a record of who we have spoken with and what has been asked for/provided. If we can’t answer your query/request over the phone, we’ll need your contact information for our response.
What we do with it
We’ll only use your personal information to respond to you and will make a record of our communications with you, both verbal and written.
We’ll also use your contact information to send you our press releases.
How long we keep it
For information about how long we hold personal data, see our retention schedule.
What are your rights?
We are acting in our official capacity as a regulator in providing you with press releases and responding to media enquiries. This means you have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.
You can however, ask us to stop sending you press releases at any time and we’ll update our records immediately to reflect your wishes.
For more information on your rights, please see ‘Your rights as an individual’.
Do we use any data processors?
Yes – We use Onclusive and Kantar, who are in partnership with Agility, to store communications and distribute our press releases.
Go to the privacy notices for Kantar and Onclusive to find out more about how they process personal data.