ARTICLE 13 PRIVACY NOTICE
Data Protection Act 2018/General Data Protection Regulations UK (GDPR UK)
THIS PRIVACY NOTICE IS FOR BOOKING ONE OF OUR EVENTS ONLINE THROUGH TICKETSELLERS
As the event organiser London Biggin Hill Airport will act as a controller of your data.
TicketSellers act as both a data controller and data processor with respect to your data.
THE PERSONAL INFORMATION THAT IS PASSED TO US DIRECTLY FROM TICKETSELLERS
We currently collect and process the following information: –
- Your E-mail Address
- Phone Number
HOW WE GET THE PERSONAL INFORMATION AND WHY WE HAVE IT
All of the personal information we process is provided to us by TicketSellers.
We use this information in order to run our event and provide you with the information/communications/tickets required in order to attend/take part in our event.
Under the General Data Protection Regulation UK (GDPR), the lawful basis we rely on for processing this information is: –
Contract, this means that the processing is necessary for a contract you have with us.
We receive and view your data via a client portal on TicketSellers website. Ticketsellers database is located in Europe. The live data is encrypted, and all data is encrypted during transmission to and from our browser.
HOW WE STORE YOUR PERSONAL INFORMATION AND HOW LONG WE RETAIN YOUR DATA
London Biggin Hill Airport will download your data onto our secure UK based server. Backup data is stored within the UK on secure airport servers.
We will retain your data until the end of the event and if requested by you we will keep your data in order to let you know about the next event taking place.
DATA SHARING & ACCESS TO YOUR DATA
Your data may be shared internally with trusted employee’s involved in the event as required.
If required we may give access to some of your data to our trusted third-party companies in order to fulfil your ticketing contract. Our trusted third-party’s will only have access to limited data on the day of the event and will not further process your data. Should you require more information then please feel free to contact us.
Under no circumstances will your data be shared by us for further marketing purposes.
DATA THAT MAY BE COLLCTED BY LONDON BIGGIN HILL AIRPORT WHEN YOU ATTEND/TAKE PART IN OUR EVENT
London Biggin Hill Airport may take photos and videos at our events.
These photos/videos will be used by us to share news and to publicise our next event. Images may be used in press releases, printed publicity and published on our social media pages. Images will be stored until the next similar event, after which the photos/videos will be deleted.
Please inform us by contacting firstname.lastname@example.org or the email@example.com if you do not wish us to use photos/videos that you are present in. Alternatively, please let us know at the point of registration.
You will still have the option of withdrawing your consent after the event up to the point of publication. Once the photos/videos have be publicised it would be of disproportionate effort for us to recover said material.
Photographs will be stored within the UK on secure airport servers.
YOUR DATA SUBJECT RIGHTS
As a data subject whose personal information we hold, you have certain rights. If you wish to exercise any of these rights, please email firstname.lastname@example.org or use the information supplied in the ‘Contact Us’, section below. To process your request, we will ask you to provide two valid forms of identification for verification purposes. Your rights are as follows:
THE RIGHT TO BE INFORMED
As a data controller, we are obliged to provide clear and transparent information about our data processing activities. This is provided by this privacy notice and any related communications we may send you.
THE RIGHT OF ACCESS
You may request a copy of the personal data we hold about you free of charge. Once we have verified your identity and, if relevant, the authority of any third-party requestor, we will provide access to the personal data we hold about you as well as the following information:
- The purposes of the processing
- The categories of personal data concerned
- The recipients to whom the personal data has been disclosed
- The retention period or envisioned retention period for that personal data
- When personal data has been collected from a third party, the source of the personal data
If there are exceptional circumstances that mean we can refuse to provide the information, we will explain them. If answering requests is likely to exceed one calendar month, where we require additional time or (extended by 2 calendar months), or, in the case of repetitive requests, we reserve the right to request payment (for reasonable administrative costs) before processing the request, we will inform you.’
THE RIGHT TO RECTIFICATION
When you believe we hold inaccurate or incomplete personal information about you, you may exercise your right to correct or complete this data. This may be used with the right to restrict processing to make sure that incorrect/incomplete information is not processed until it is corrected.
THE RIGHT TO ERASURE (‘THE RIGHT TO BE FORGOTTEN’)
Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data. This includes personal data that may have been unlawfully processed. We will take all reasonable steps to ensure erasure.
Due to the complex nature of Consent and legal exemption, we are not always able to fulfil deletion (“Right to be Forgotten”) requests, and it is essential you understand this before accessing the service.
THE RIGHT TO RESTRICT PROCESSING
You may ask us to stop processing your personal data. We will still hold the data, but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies, you may exercise the right to restrict processing:
- The accuracy of personal data is contested.
- Processing of personal data is unlawful.
- We no longer need personal data for processing, but the personal data is required for part of a legal process.
- The right to object has been exercised, and processing is restricted pending a decision on the status of the processing.
THE RIGHT TO DATA PORTABILITY
You may request your set of personal data be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of Consent, the processing is by automated means and if the processing is based on the fulfilment of a contractual obligation.
THE RIGHT TO OBJECT
You have the right to object to our processing of your data where;
- Processing is based on legitimate interest;
- Processing is for the purpose of direct marketing;
- Processing is for the purposes of scientific or historic research; or
- Processing involves automated decision-making and profiling.
To prevent unauthorised access, maintain data accuracy and ensure the correct use of information, we have in place appropriate physical, electronic and managerial procedures to safeguard and ensure information supplied is held securely, in accordance with the Data Protection Act 2018 and the UK GDPR.
HOW TO COMPLAIN
If you have any concerns about our use of your personal information, you can make a complaint to us at London Biggin Hill Airport email@example.com
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Livechat via ico.org.uk/livechat
Helpline number: 0303 123 1113
ICO website: www.ico.org.uk
Updated 23 May 2022