1.1 The Deltic Group Limited ("we", “us” or “our”) are committed to protecting and respecting your privacy.
1.2 This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting https://eden.tick.it/portsmouth-eden (our “site”) you are accepting and consenting to the practices described in this policy.
1.3 For the purpose of the Data Protection Act 2018 and the General Data Protection Regulation 2016/679 (“GDPR”) or any equivalent legislation which may replace the GDPR as a result of Brexit, the data controller is The Deltic Group Limited of Deltic Avenue, Rooksley, Milton Keynes MK13 8LW (with registration number 07870512).
2.1 We may collect and process the following data about you:
2.1.1 Information you give us. You may give us information about you by filling in forms on our website or by corresponding with us by phone, e-mail, SMS, social media or otherwise, for example by allowing us to take copies of your identification document(s). This includes information you provide when you register to use our website, subscribe to our service, search for a product, place an order on our website, participate in discussion boards or other social media functions on our website, enter a competition, promotion or survey and when you report a problem with our website. The information you give us may include your name, address, e-mail address, mobile or fixed-line telephone number, date of birth, gender, financial information, personal appearance description and photograph (“Personal Information”).2.1.2 Information we collect about you. With regard to each of your visits to our website we may automatically collect the following information (“Technical Information”):
5.1 We will only use your personal data where we have legal grounds to do so. We determine the legal grounds based on the purposes for which we have collected and used your personal data. In every case, the legal ground will be one of the following:
5.1.1 Performance of a contract with you (or in order to take steps prior to entering into a contract with you): for example, where you have made a booking with us and we need to use your contact details and payment information in order to process your booking.
5.1.2 Consent: for example, where you have provided your consent to receive marketing communications from us. You can withdraw your consent at any time. In the case of marketing emails, you can withdraw your consent by clicking on the “unsubscribe” link at the bottom of the email, for SMS, you can respond by entering the word STOP and for telephone marketing, you can request that the sales person change your telesales permissions. Alternatively, you can visit our website and change all your marketing preferences in the “Your Account” section.
5.3 Our legitimate interests: where it is necessary to understand our customers’ needs so we can improve the services we provide. For example, we will rely on our legitimate interest when we analyse what content has been viewed on our websites, so that we can understand how they are used. It is also in our legitimate interest to carry out marketing analysis to determine what services may be relevant to the interests of our customers.
5.4 Compliance with law: in some cases, we may have a legal obligation to use or keep your personal data. For example to allow us to comply with our licensing obligations or health and safety laws.
6.1 We may share your Personal Information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries.
6.2 We may share your information with selected third parties including business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you.
6.3 When you sign into our website using your Facebook login details, you give permission to Facebook to share with us your email address and certain aspects of your Facebook profile if you have made these available through your Facebook privacy permissions. This may include your first and last name, age range, link to your Facebook profile and profile picture, if you have allowed this in your Facebook privacy settings. We do not, however, have access to updates on your Facebook profile. The same principles apply if you log in to our website using your Google login details.
6.4 We may disclose your Personal Information to third parties:
6.4.1 if we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
6.4.2 if The Deltic Group Limited or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets;
8.1 We will ask you if it is okay for us to process your Personal Information for marketing purposes.
8.2 The GDPR gives you the following rights:
8.2.1 Right to rectification. You have the right to rectification of inaccurate personal data.
8.2.2 The right to be forgotten. You have the right to obtain from us the erasure of your personal data where: (a) the personal data is no longer necessary in relation to the purposes for which it was collected or processed; (b) you withdraw your consent to processing for which we previously obtained your consent; (c) you object to the processing; (d) the personal data has been unlawfully processed; and (e) we are required to erase the personal data in order to comply with the law.
8.2.3 Right to restriction. You have the right to obtain from us the restriction of processing where: (a) you contest the accuracy of the personal data we hold about you; (b) the personal data has been unlawfully processed; (c) we no longer need the personal data but they are required in limited circumstances; and (d) you object to the processing.
8.2.4 Right to data portability. In certain circumstances, you have the right to receive personal data from us in a structured, commonly used and machine-readable format and the right to transmit it to a third-party organisation.
8.2.5 Right to object. You have the right to object to any of our processing. Please tell us if you object to any of this.
8.2.6 Right to object to marketing. If you do not want us to process your personal data for direct marketing, please tell us and we will ensure that we no longer do this.
8.2.7 Right to complain to the ICO. Whilst we prefer it if you approached us first about any complaints or queries you may have, you always have the right to lodge a complaint with the Information Commissioner’s Office.
8.2.8 Subject access right. You have the right to access personal data we hold about you. Your right of access can be exercised in accordance with the GDPR.
8.3 Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
8.4 We will not keep any personal data about you for any longer than is necessary for the purposes for which the personal data are processed. In any event, we will not keep your personal data for longer than 6 years after first obtaining it.