On 25 May 2018, the General Data Protection Regulation (GDPR) will come into force giving individuals in the European Union enhanced rights over the use of their data. As a result, we have updated our data protection policy. Under the GDPR, we require your consent to hold and use your personal data. The purpose of this policy is to advise you of your rights under the GDPR.
Why am I seeing this?
You are seeing this because you either:
- Registered your interest in receiving communications from us regarding the Wales Startup Awards and thus consented to this; or
- Previously participated in the Wales Startup Awards which gives a legitimate interest in asking you if you are interested in participating in the awards again this year.
- Are about to enter the Wales StartUp Awards.
What we intend to use your personal data for
With your consent, we intend to use your personal data which you have supplied us with or will supply to us as follows:
- To bring you news and information about the Wales Startup Awards and its Partners.
- To give your information to the partners of the Wales Startup Awards for the purposes of the awards.
We will not use your data other than for the purposes described above. You can also give your consent by emailing and copying and pasting the following (or one or more of them):
- I consent to receiving communications regarding the Wales Startup Awards.
- I consent to my personal information being shared with the sponsors of the Wales Startup Awards for the purposes of the awards programme.
- I consent to receiving communications regarding future Wales Startup Awards.
- You will have the opportunity to unsubscribe by emailing us: firstname.lastname@example.org
Protection of your personal information
We will not sell your personal data or share it with any third parties, except the sponsors as outlined above, who will be contractually bound to keep the information secure and confidential. We will not keep your personal data for longer than is necessary for the stated purposes except to the extent required by law. We will take all reasonable and necessary steps to protect your personal data.
Your rights under the GDPR include the following:
- The right at any time to withdraw your consent to the processing of your personal data.
- The right to be informed of what personal data of yours we hold, how we obtained it and how long we intend to keep it.
- The right to have your personal data rectified in the event that it is inaccurate or incomplete.
- The right to request the erasure of your personal data (also called the right to be forgotten).
- The right to restrict the processing of your personal data.
- The right to data portability (i.e. transfer of your personal data to another organisation).
- Your rights above can be exercised free of charge by sending an email to email@example.com.
In certain cases, we will need to satisfy ourselves of your identity before we can action a request under the GDPR.
If you feel that any of your rights have been infringed, you have the right to lodge a complaint with the Information Commissioner’s Office.