Following the provision of the EU Regulation 679/2016 (“GDPR – General Data Protection Regulation”) Sarah Jones Marketing Ltd. and the other affiliated companies inform that any personal data provided by the Data Subject (meaning the individual who is the subject of personal data) will be used in accordance with the applicable regulation and in compliance with the following criteria:
1) DATA CONTROLLER
Data Controller the person recognised by law who determines the purposes for which and the manner in which any personal data are, or are to be, processed is the Sarah Jones Marketing Ltd. (hereinafter Sarah Jones Marketing) having its registered office at Walton on Thames, Surrey, UK in person of his pro-tempore legal representative.
This privacy notice is issued on behalf of the Sarah Jones Marketing Group so when we mention "Sarah Jones Marketing", "we", "us" or “our” in this privacy notice, we are referring to the relevant company in the Sarah Jones Marketing Group responsible for processing your data. Sarah Jones Marketing Ltd (UK) is the controller and responsible for this website.
We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the data privacy manager using the details set out below.
2) PERSONAL DATA
Sarah Jones Marketing will process only the following categories of personal data:
Sarah Jones Marketing does not collect and does not process any sensitive data on the Site, such as, for example, revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organisations of a religious, philosophical, political or trade union nature, as well as personal data capable of revealing the state of health and sexual life.
Sarah Jones Marketing will request only the personal data strictly necessary to provide the products and services requested by users. The data provided will be processed for the purposes related to the activity of the Site and will be stored and processed to ensure the respect of the data subject rights.
3) RIGHT TO WITHHOLD THE PERSONAL DATA
Providing personal data is optional, but may be necessary for the achievement of some of the purposes indicated (e.g. the activation of contractual and commercial relations, the management of competitions and prize operations, sending newsletters, etc.), not providing personal data reported as mandatory will not allow Sarah Jones Marketing to pursue the abovementioned purposes.
The mandatory or optional nature of the personal data is from time to time reported using symbols (eg "*") placed alongside the information.
In any case, personal data will be processed by Sarah Jones Marketing only on the following legal basis:
The data subject has given consent to the processing of his or her personal data for one or more specific purposes. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. Processing is necessary for compliance with a legal obligation to which the data controller is subject to.
4) PURPOSE OF PERSONAL DATA PROCESS
The personal data you, the data subject provide will be collected and processed by Sarah Jones Marketing for the following purposes:
4.1 Further Purposes
If expressly and freely authorised by the Data Subject, Sarah Jones Marketing may send informative and promotional materials relating to Sarah Jones Marketing products and services such as sending of newsletters and other promotional and commercial communication initiatives to the Data Subject including the use of the contacts provided by the Data Subject.
5) HOW WE TREAT YOUR DATA
Personal Data process is compliant with the provisions of the GDPR and with all the other relevant applicable law, and it is performed with the help of electronic and automated tools, all designed to ensure the maximum security and confidentiality extent to the personal data processed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
All personal data provided are kept by the Data Controller in compliance with appropriate security measures. The Data Controller will implement appropriate technical and organisational measures to guarantee a level of security appropriate to the risk of processing.
6) HOW DO WE COMMUNICATE OR TRANSFER YOUR PERSONAL DATA
Personal data may be made accessible for the purposes above mentioned to:
Employees and personnel of the Data Controller in the UK, as persons in charge of processing and / or system administrators and / or administrators; Third party companies or other legal entities (as an indication, credit institutes, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that carry out outsourcing activities in the UK and abroad on behalf of the Data Controller, as an external Data Processor. The personal data will not be disclosed to third parties, except for the other companies belonging to Sarah Jones Marketing. We do not transfer any personal data outside the European Union.
The personal data may also be disclosed to primary third-party companies (business partners and service providers) if and as legitimately instructed by Sarah Jones Marketing as Data Processors to perform functional activities to achieve the purposes as indicated above.
The list of the Data Processor will be constantly updated and at your disposal by contacting the Data Controller at the addresses indicated below.
7) DATA RETENTION PERIOD
Personal Data useful for Site signing-in will be kept for the entire duration of its registration on the Site and for the further period provided for by law, in relation to the purpose of the collection.
Personal Billing Data will be kept for a period of time to guarantee the correct execution of the contract and the fulfilment of the related administrative and fiscal obligations.
Data collected for the purposes of sending promotional and advertising material and data collected for commercial profiling purposes will be retained for the period of the commercial contract, where consent is given or for a different period indicated by the supervisory authorities.
Personal data collected for the management of prize competitions and transactions will be kept for the entire duration of the premium transaction and for a period of time to ensure the correct execution of the contract and the fulfilment of the related administrative and tax obligations. Specific details will be expressed in the terms and conditions of the aforementioned prize draw, survey or competition.
The data collected for profiling purposes will be kept for a period of time not exceeding 48 months or at the different period indicated by the supervisory authorities.
We strongly recommend that parents take an active role in supervising the online activity of their children under the age of sixteen. Sarah Jones Marketing generally does not intend to collect personal data from and/or generally does not intentionally communicate with children. However, in case we need to communicate with a child, we will endeavour to give the parents or legal guardians a reasonable opportunity to consent before we use the personal data of the child, except where we merely answer the child’s question or service the child’s request.
9) RIGHTS OF THE DATA SUBJECT
Data Subjects may at any time exercise the rights provided by the EU Regulation 679/2016, including:
1. The right to obtain confirmation of the existence or not of personal data concerning the data subject even if not yet registered, and their communication in an intelligible form;
2. The right to revoke at any time the consensus given by the data subject with regards to the purpose of personal data process;
3. The right to obtain access, rectification, cancellation, limitation on the data process and data portability in line with the indications provided to the Data Controller.
4. The right to oppose to the data processing;
5. The right to appeal before the competent Authority.
10) EXERCISE OF THE RIGHTS : CONTACTS
In the event a data subject wishes to exercise the aforementioned rights or wishes to receive further clarifications regarding the processing of personal data, data subject may contact the Data Controller and Data Privacy Manager at the following email address:
Sarah Jones Marketing Ltd.